Where alerts come from. Built-in sources have their own parser; a custom webhook takes any JSON. Every POST to an endpoint becomes a live alert. Open one to copy its URL, change its routing or see what it last received. Web apps that send their security events have their own tokens under Security log › Sources.
A person can open the highest level any of their groups or their own direct grants gives. A group with a department rule holds everyone in that department.
Name
Members
Access
Rule
Updated
Actions
Departments
A user's department is picked from this list, and a group's department rule keys on it. A department in use cannot be removed.
Name
People
Group rules
Actions
Devices
Phones with the mobile app and computers with the desktop app, for every user. Revoking or signing one out makes that person sign in again on it.
User
Role
Department
Device
First seen
Last used
Actions
User
Device
System
Version
Signed in
Last seen
Actions
Desktop app
Infra Engine for Mac and Windows: the full app in its own window, with native alert notifications (even when the window is closed), a menu bar / tray icon and automatic updates.
How to install
Mac (macOS 11 or later, Apple silicon and Intel)
Download and open the .dmg, then drag Infra Engine into Applications.
Open it from Applications. The first time, macOS may say it cannot check the app: open System Settings → Privacy & Security, scroll down and click Open Anyway. This is needed once only.
Sign in as usual and allow notifications when asked.
Windows (10 or 11, 64-bit)
Download and run the setup.exe. It installs for your user only, without admin rights.
If Windows shows “Windows protected your PC”, click More info → Run anyway.
Sign in as usual. Alerts appear as Windows notifications.
Updates download in the background, and the app asks before restarting. Notifications follow your alert settings: warning and danger alerts, in your categories and departments.
Rules that turn events into Infra alerts (Alerts area, phones and the desktop app). Each rule is On or Off and can give fewer or more alerts. The thresholds are defaults for you to set: each rule's numbers and exclusions are on its page.
Rule
Status
Threshold
Apps
Sensitivity
Severity
Open alerts
One row per web app that posts its security events to Infra (POST /api/ingest/security with its own token). Infra Engine is built in.
Source
Health
Token
Last event
24 h
7 days
Actions
Recycle bin
Deleted assets, domains, contacts, users, IT access records and documents (from both documentation spaces) land here. Restore puts them back; Delete forever removes them permanently. Owner only.
Item
Type
Deleted by
Deleted
Actions
Organisations
Organisations tag assets, users, contacts and domains. Renaming one updates every record tagged with the old name. Removing one leaves already-tagged records untouched until they are edited. Owner only.
Name
Actions
Access types
Built-in access types can be hidden or shown; custom ones are added here. They are the toggles in the user access form and the chips in the list. Hiding one keeps existing data.
Employee fields
The columns of every employee record in People › Employees. Rename, remove, reorder or add fields; changes apply to all records on Save. Core fields are locked. Removing hides a column everywhere (stored data is kept, so re-adding restores it).
EBET roles
Roles fill the role chips of the EBET access form. Removing a role only takes it off the picker; people already assigned keep it until they are edited.
Asset types
Types an inventory asset can have. Assets whose type is removed keep their type label.
INWX and GoDaddy accounts whose domains sync into Inventory. GoDaddy is read-only.
Asset-label logos
One logo per company, printed on the asset stickers of IT equipment.
Documentation
Clear this space deletes every article and folder in it, permanently (not to the recycle bin), so an import can be run again from nothing. You type the space's name to confirm. Shown for the spaces you can write to.
