All features

Mobula · System Pulse

Know your blind spots
before the
attacker does.

A silent connector means you're flying blind. Mobula continuously watches every data source and connector, flags the ones that went quiet, and tells you before a gap becomes an incident you never saw coming.

32
Connectors monitored
29
Healthy right now
3
Need attention
System Pulse / Platform health at a glance
System Pulse
Platform health at a glance
⚙ Settingsupdated 9s ago
System status
CRITICAL — 1 issue
1 active issue across the platform
1
Active issues
16
Events today
1 / 7
Active connectors
0 ev/min
Avg ingest rate
15m
Server uptime
Mobula Server
DB · Queue · AI · Poller
0
OK
Cygents
Hosts running CyRay agent
0
0 crit · 2 warn
Connectors
Event ingestion endpoints
1
1 crit · 1 warn
Devices
Reporting devices per customer
Coming soon
Integrations
ESM · VirusTotal · AD · SMTP
0
0 crit · 0 warn
Customer Down
Tenants with zero events
0
0 crit · 0 warn
LIVE
02:35 PMThreat Detected (SentinelOne) on WKS-1180: unknown.exe
02:14 PMNew Chrome extension installed on WKS-2044 by jsmith
02:05 PMSuspicious encoded PowerShell on BUILD-SRV03
02:03 PMKeepAlive: DC PRIMARY-DC1 stopped sending events
01:53 PMRemote AppX download on APP-SRV07 by mreyes
01:27 PMADMINISTRATOR interactively logged in to WKS-0891
01:22 PMMultiple events from same host FIN-LAPTOP-12
12:47 PMTightVNC executed on OPS-DSK-204 by kwong
12:42 PMMultiple events from same host HRDB-01
12:32 PMPrivileged account svc-backup password changed
12:27 PMRemCom service file creation on SEC-DESKTOP-19
Top issues · 2
Critical
Meridian Retail – Microsoft Office 365
No events · Meridian Retail
Warning
Northbridge Legal – Microsoft Office 365
No events · Northbridge Legal
Event volume · 7DHourlyDaily
126 events total · 9 types
12:0012:0012:0012:0012:0012:0012:0011:00
Connector Started 65Connector Not Receiving Events 30Connector Deleted 8Dead Connector Reappeared 7Connector Is Dead 6Connector Dropping Events 5New Connector Discovered 2Connector Queue Dropping Events 2Other 1
01

Every source. Continuously watched.

Mobula monitors every connected data source for activity, latency, and event volume. It knows what normal looks like for each connector - and flags the moment something deviates. Not just "is it connected?" but "is it actually sending the events we expect?"

Connector Health / 28-day uptime
Microsoft SentinelSIEM
CrowdStrike EDREDR
Palo Alto NGFWFirewall
Okta IdentityIAM
AWS CloudTrailCloud
Syslog - DMZLog
Tenable.ioVuln Scan
HealthyDegraded / StaleSilentNo data
02

Mobula tells you. Before the gap matters.

When a connector goes quiet, Mobula doesn't wait for an analyst to notice. It creates a system alert, assesses which detection categories are now blind, and tells you exactly what visibility you've lost.

System Alerts / Connector events
02:11
SilentAWS CloudTrail - no events for 2h 8m
Last event at 00:03. Expected cadence: every 60s. Cloud activity is now invisible - privilege escalation, data access, and IAM changes will not alert.
Cloud coverage lost
01:47
DegradedOkta Identity - event rate 78% below baseline
Receiving 12 events/min vs. expected 54. Authentication anomalies and impossible travel detection are degraded.
Identity coverage degraded
21:30
StaleTenable.io - last scan result 6h ago
Vulnerability data is stale. New CVEs published since last scan will not be correlated with active alerts.
Vulnerability correlation stale
14:22
ResolvedCrowdStrike EDR - connectivity restored
Brief degradation at 14:09 (13 min). All EDR telemetry resumed. No alerts were missed during the window.
No coverage gap
03

See exactly what you can and can't see.

Mobula maps your active connectors to detection categories. At a glance you can see which attack surfaces are fully monitored, which are partially covered, and which are completely dark - so you know where to act first.

Coverage Map / Detection categories
Endpoint
CrowdStrike EDR
Syslog - DMZ
Full coverage
Network
Palo Alto NGFW
NetFlow
Full coverage
Identity
Okta (degraded)
AD Event Logs
Partial - Okta degraded
Cloud
AWS CloudTrail (silent)
BLIND - no events
SIEM Correlation
Microsoft Sentinel
Full coverage
Vulnerability
Tenable.io (stale)
Stale - 6h old data
04

Full connector history for every audit.

Every gap, every degradation, every recovery - logged with timestamps and impact assessment. When an auditor asks "was your EDR online during this incident?", you have a precise answer.

Connector History / Last 30 days
Overall uptime
98.7%
Incidents logged
9
Total gap time
3h 41m
Avg recovery
18 min
AWS CloudTrailSilent - no events02:11 todayOngoing2h 8m+
CrowdStrike EDRDegraded connectivity14:09 yesterday14:2213 min
Okta IdentityEvent rate drop01:47 todayOngoing2h 32m+
Tenable.ioNo new scan results21:30 yesterdayOngoing6h+
Palo Alto NGFWPacket loss spike09:14 Jun 2209:31 Jun 2217 min

Every connector · continuous monitoring · full audit history

Stop finding out about
gaps after the incident.

Mobula watches every data source so you don't have to. When something goes quiet, you know immediately - with a clear picture of exactly what visibility you've lost and what it means for your coverage.

Mobula SOAR · system pulse · 28-day connector history