> For the complete documentation index, see [llms.txt](https://docs.facephi.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.facephi.com/docs.facephi-en/products/facephi-intelligence-platform/modulos/dashboard.md).

# Dashboard

Dashboard provides an overview of FIP activity and lets you quickly identify which areas require attention.

<figure><img src="/files/b96771a957b3203c68d83cbaebeef0c5d10aa226" alt=""><figcaption></figcaption></figure>

From this screen you can:

* Review the main indicators for the selected period.
* Compare their evolution with the previous period.
* Identify sessions, operations, and identities that require attention.
* Analyze aggregated information from Behaviour, ID Verification, and Identities.
* Detect geographical concentrations of risk.
* Review the most relevant statuses and signals for each module.
* Identify devices, IP addresses, or identities related to a high volume of activity.
* Analyze traffic by operating system and network type.

Dashboard is a query surface. Use the available shortcuts when you need to investigate a session, operation, or identity in its corresponding module.

{% hint style="info" %}
The information available depends on the modules you have contracted and the permissions associated with your profile.
{% endhint %}

***

## How it is organized

Dashboard is divided into four main areas:

* **Main indicators**, to quickly understand volume, conversion, and risk.
* **Modules that require attention**, to identify which modules contain items that need review.
* **Module overview**, to analyze aggregated information from each module.
* **Traffic insights**, to understand the technical context of the recorded traffic.

The filters at the top affect the information shown in Dashboard.

***

## Filter the information

Use the controls at the top to define what information you want to analyze.

<figure><img src="/files/2a47fff03d46fc1aa3d87487ae01cd810d09999f" alt=""><figcaption></figcaption></figure>

### Time range

Select **Time range** to define the period.

The indicators, widgets, and comparisons are updated according to the selected interval.

When a comparison exists, an equivalent previous period is used as a reference.

### Additional filters

Select **Filter** to apply other available criteria in Dashboard.

The number shown next to the control indicates how many filters are active.

The widgets are updated to show only the information that meets the selected criteria.

### Remove filters

Select **Clear all** to remove the applied filters and restore the initial view.

***

## Main indicators

The indicators at the top provide a quick reading of the platform's overall status.

<figure><img src="/files/08edaeef86778aada7402d3383d13d2bbbd203c2" alt=""><figcaption></figcaption></figure>

Each indicator shows:

* The value corresponding to the selected period.
* Additional context about the metric.
* The variation compared with the previous period, when available.

### Total operations

Shows the total number of operations recorded during the selected period.

Use it to understand the activity volume and check whether it increases or decreases compared with the previous period.

### Success rate

Shows the percentage of operations completed successfully out of the total number of operations.

A decrease may indicate that it is worth reviewing operation statuses and failure reasons in ID Verification.

### High risk alerts

Shows the number of high-risk alerts that require attention.

Use [**Modules that require attention**](#modules-that-require-attention) and [**Module overview**](#module-overview) to identify where this risk is concentrated.

### High-risk identities

Shows the number of identities classified as high risk.

It can also indicate what percentage they represent out of the total analyzed identities.

Use the [**Identities**](#identities) tab in Module overview or access the module to investigate them in detail.

{% hint style="info" %}
The indicators help detect changes, but they do not explain their cause on their own. Use the rest of Dashboard to add context.
{% endhint %}

***

## Modules that require attention

Modules that require attention shows the modules that contain sessions, operations, or identities that may require review.

The modules are prioritized according to the detected risk level.

<figure><img src="/files/39f29630f4593a115effebb2353dc0d308069519" alt=""><figcaption></figcaption></figure>

Each card can show:

* Module name.
* Risk level.
* Number of items requiring attention.
* Main reasons.
* Action to open the corresponding module.

### Behaviour

Shows the sessions that may require review.

The card can distinguish, for example:

* High-risk sessions.
* Very high-risk sessions.

Select **Review sessions** to open Behaviour and continue the investigation.

### Operations

Shows the operations that require attention.

It can include reasons such as:

* Rejected operations.
* Blocked operations.

Select **Review operations** to open ID Verification.

### Identities

Shows the identities that require attention.

It can include those that have reached a high Identity Risk score.

Select **Review identities** to open Identities.

{% hint style="info" %}
The summary cards explain why a module requires attention. Use the corresponding access point to view the specific items and their evidence.
{% endhint %}

***

## Module overview

Module overview lets you analyze aggregated information from each module without leaving Dashboard.

<figure><img src="/files/a574348d1783ca9df280ccfc965496b47745dc54" alt=""><figcaption></figcaption></figure>

The available tabs in the current Version are:

* **Behaviour**
* **ID Verification**
* **Identities**

Select a tab to view its indicators.

The active tab changes the content of Module overview, but does not affect Traffic insights.

***

## Behaviour

The Behaviour tab summarizes session activity and the main risk signals detected.

### Geographical distribution of risk

The map shows how risk is distributed across different locations.

Sessions are grouped geographically and differentiated according to their risk level:

* **High:** 70 or higher.
* **Medium:** between 40 and 69.
* **Low:** below 40.

The size or value associated with each grouping helps identify where activity is concentrated.

Use the map controls to zoom in or out.

{% hint style="info" %}
A geographical concentration of risk does not by itself mean fraud exists. Use it to decide which locations need a more detailed investigation.
{% endhint %}

### Top countries with highest risk

Shows the countries with the highest presence of sessions associated with elevated risk levels.

You can view the information by:

* **Volume**, to compare absolute amounts.
* **Percentage**, to compare the weight of each country within the analyzed set.

Use this widget together with the map to identify where the risk is concentrated.

### Session status

Shows how sessions are distributed according to their status.

It can include:

* **Completed**
* **Cancelled**
* **Abandoned**
* **Running**

Each status shows:

* Number of sessions.
* Percentage relative to the total.

Use this information to identify changes in the proportion of sessions that do not get completed.

### Detected smart signals

Shows the Smart signals detected most frequently during the analyzed sessions.

It can include:

* **VPN detected**
* **Proxy detected**
* **Tor detected**
* **Jailbroken device**
* **Bot activity detected**
* **Location spoofing**
* **Velocity anomaly**

Each signal shows:

* Number of detections.
* Percentage relative to the analyzed set.

{% hint style="info" %}
A Smart signal indicates that a specific condition has been detected. It does not by itself confirm that the session is fraudulent.
{% endhint %}

Consult the BDS documentation to learn the meaning and context of the Smart signals.

### Top related entities

Shows the entities related to the highest number of sessions.

You can switch between:

* **Devices**
* **IP addresses**
* **Identities**

Each record shows the entity and the number of sessions it is related to.

It may also include relevant signals or characteristics, such as:

* Rooted.
* Jailbroken.
* Frida.
* Other available indicators.

#### Devices

Shows the devices most frequently associated with the analyzed sessions.

Use it to identify devices with a high volume of activity or related to relevant signals.

#### IP addresses

Shows the IP addresses related to the highest number of sessions.

Use it to detect recurring connections or activity concentrated around the same IP.

#### Identities

Shows the identities related to the highest number of sessions.

Use it to detect identities with unusually high activity or those that appear repeatedly during the analyzed period.

{% hint style="info" %}
A high number of related sessions does not necessarily mean fraudulent activity. Also review the signals, risk, and context of the entity.
{% endhint %}

***

## ID Verification

Select the **ID Verification** tab to view aggregated information about verification operations.

The widgets in this tab let you analyze volume, statuses, outcomes, and the main causes that require attention.

Use this view to identify patterns before opening ID Verification and analyzing a specific operation.

{% hint style="info" %}
The specific content of this tab may differ from Behaviour because each module uses indicators adapted to the type of information it analyzes.
{% endhint %}

***

## Identities

Select the **Identities** to view aggregated information about the identities available on the platform.

Use this view to detect risk concentrations, identify identities that require attention, and decide when you need to open the Identities module to investigate a specific case.

***

## Traffic insights

Traffic insights shows cross-cutting information about the technical context of sessions.

These widgets help you understand which systems and networks the analyzed traffic comes from.

<figure><img src="/files/a251b242f249e68f0f06b0601debd6dd880cb7f5" alt=""><figcaption></figcaption></figure>

### Session status

Shows the distribution of sessions according to the operating system used.

It can include:

* **iOS**
* **Android**
* **Windows**
* **Other**

Each category shows:

* Number of sessions.
* Percentage relative to the total.

Use this information to identify changes in the distribution of platforms from which users access.

### Network

Shows how sessions are distributed according to the detected network type or context.

It can include:

* **WiFi**
* **VPN**
* **Tor**
* **Other**

Each category shows:

* Number of sessions.
* Percentage relative to the total.

Use this widget to add context to signals related to connectivity and traffic origin.

{% hint style="info" %}
Network type is contextual information. A connection through VPN or Tor does not automatically imply fraudulent activity.
{% endhint %}

***

## How to analyze Dashboard

{% hint style="info" icon="note" %}
For a quick view of the status of FIP 360:

1. Check the selected period and filters.
2. Review **Total operations** and **Success rate** to understand volume and overall performance.
3. Check **High risk alerts** and **High-risk identities** to detect changes related to risk.
4. Review **Modules that require attention** to identify which area needs attention first.
5. Use the corresponding CTA to directly investigate sessions, operations, or identities when needed.
6. Consult **Module overview** to understand what is causing a variation.
7. In Behaviour, review the map, the countries with the highest risk, session statuses, and Smart signals.
8. Consult **Top related entities** to identify devices, IPs, or identities with relevant activity.
9. Use **Traffic insights** to add context to the activity according to the operating system and network.
   {% endhint %}

Dashboard summarizes the status of the platform. Use the specialized modules when you need to analyze evidence or investigate a specific item.