Skip to content
English
Contact AgileBlue Support Customer portal
AgileBlue Portal
  • There are no suggestions because the search field is empty.

Detection & Response Performance Panel

Track how quickly your organization detects and responds to threats, directly from your AgileBlue Dashboard.

Overview

The Detection & Response Performance panel is a new three-box metrics display on the Dashboard's top row, located to the right of the Cyber Risk Score widget. It replaces the previous Risk Score Trend chart and gives you a rolling 30-day view of your organization's detection speed and response time. For all three metrics, lower values indicate better performance.

Viewing the Panel

  1. Log in to the AgileBlue Portal.
  2. Navigate to the Dashboard.
  3. Locate the Detection & Response Performance panel in the top row, to the right of the Cyber Risk Score widget.
  4. Review the three metric boxes to see your organization's rolling 30-day performance:
    1. MTTD (Mean Time to Detect)
    2. MTTR - Autonomous
    3. MTTR - Analyst

Understanding the Metrics

  1. MTTD (Mean Time to Detect) - Your organization's average time to detect a threat.
  2. MTTR - Autonomous - Calculated as the time between a case status being set to Malicious or Malicious - Breach and the timestamp of the closest first response action issued automatically by Sapphire AI's auto-response.
  3. MTTR - Analyst - Calculated as the time between a case status being set to Malicious or Malicious - Breach and the timestamp of the closest first response action issued by a SOC analyst.

How the MTTR - Autonomous Box Changes Based on Your Settings

The MTTR - Autonomous box displays differently depending on whether Autonomous Response is enabled for your organization. MTTD and MTTR - Analyst always display the same way regardless of this setting.

  1. If Autonomous Response is enabled for your organization, the box displays your own organization's average MTTR - Autonomous value, highlighted in green.
  2. If Autonomous Response is not enabled for your organization, the box instead displays a global benchmark average (shown with a dashed border, without the green highlight) along with a note reading "if Autonomous Response is enabled," indicating the value shown is a benchmark rather than your organization's own data.

Need Help?

If you have any questions about this feature, please don't hesitate to reach out. AgileBlue Support is also here to assist with any setup questions and can be reached at support@agileblue.com or by submitting a ticket.