Section C
Detection & Verdict Glossary
Terms that appear in the Security Lab, Reports and policy verdicts.
Verdict fields
| Field | Meaning |
|---|---|
| Classification | Overall judgement: benign, suspicious or malicious. |
| Combined action | What the appliance does: SAFE (allow), MONITOR (allow + record), BLOCK (drop when enforcement is on). |
| Composite score | A 0 to 100 risk number aggregating all detections. |
| Total violations | How many policy rules the prompt tripped. |
| Max severity | The highest severity among the violations (None / High / Critical). |
Detection chips
| Chip | Detector |
|---|---|
FPGA |
Hardware-accelerated keyword/pattern match on the FPGA. |
SUBSTR |
Substring match against policy terms. |
KW |
Keyword match. |
FUZZY |
Fuzzy / approximate match (catches near-misses and obfuscation). |
DEOBF |
Deobfuscation: normalises disguised text before matching. |
PII |
Personal / sensitive data detected. |
Administrator vs. Viewer
| Page | Viewer | Administrator |
|---|---|---|
| Dashboard | Read | Read |
| Security Lab | Run tests | Run tests |
| Policies | Read | Create, edit, enable/disable, delete; scoring config |
| Users (Live Sessions) | Read | Read |
| Reports | Generate & export | Generate & export |
| System · Service Control | Read state | Start / stop services |
| System · IP Configuration | Read | Change addressing |
| System · Hardware Diagnostics | Read | Read |
| System · Firewall | Read | Edit services & ports |
| TLS Interception | Read | CA, domains, inspection, listener, save |
| Settings · Profile | Read | Read |
| Settings · Provider Keys | Read (no secrets) | Edit keys & models |
| Settings · Ticketing Connector | Read (no secrets) | Edit sinks |
Administrator is granted by adding the account to the lucien-admin group on the appliance; everyone else is a Viewer.
Still stuck? Submit a ticket and reference this page.