Defender

Defender is your bot's Safety and Compliance monitor. It automatically scans every conversation for policy violations, unsafe behavior, and attempted attacks, so you know immediately if your assistant is being manipulated or is putting your business at risk.

Use this screen when you need to check whether your bot is behaving safely and whether it is currently under attack.

Severity totals

At the top of the screen, you will find the severity totals. These give you a quick count of all detected incidents, grouped by severity level: Critical, High, Medium, and Low.

This overview lets you immediately gauge the scale of the risk before digging into individual cases.

Category tabs

Below the severity totals, incidents are organized into category tabs. There are four categories of incidents:

Bot misbehavior
Successful attack
Unsuccessful attack
Uncategorized

Clicking on a tab filters the incident list below to show only cases belonging to that category.

The incident list

The main body of the screen is the incident list. Each row represents a detected incident and shows its severity, category, and the date it occurred. Clicking on an incident opens its full details.

Summary and recommended steps

Inside an incident, you will find:

Summary: A clear explanation of what happened in the conversation and why it was flagged.
Recommended steps: Practical guidance on how to close the gap that allowed the incident, such as tightening a guardrail, updating a policy rule, or restricting a specific type of response.

Incidents over time

A chart shows how incidents have developed over the selected period, helping you see whether attacks or violations are increasing, decreasing, or spiking around a specific date or event.

Affected conversations

At the bottom of each incident, you will find the affected conversations — the real transcripts where the incident occurred. Reviewing these before making changes ensures your fix addresses the actual attack pattern or violation, not just a theoretical risk.

A clean Defender screen is good news

Unlike other screens in Inquio, where an empty state usually means something is missing, an empty Defender screen is a good outcome. It means no safety incidents or attacks were detected in your data.