> For the complete documentation index, see [llms.txt](https://docs.facephi.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.facephi.com/docs.facephi-en/products/facephi-intelligence-platform/modulos/dashboard.md).

# Dashboard

Dashboard offers an overview of FIP activity and makes it possible to quickly identify which areas require attention.

<figure><img src="/files/b96771a957b3203c68d83cbaebeef0c5d10aa226" alt=""><figcaption></figcaption></figure>

From this screen, you can:

* Consult the main indicators for the selected period.
* Compare its evolution with the previous period.
* Identify sessions, operations, and identities that require attention.
* Analyze aggregated information from Behaviour, ID Verification, and Identities.
* Detect geographic concentrations of risk.
* Consult the most relevant statuses and signals in each module.
* Identify devices, IP addresses, or identities related to a high volume of activity.
* Analyze traffic according to the operating system and network type.

Dashboard is a query interface. Use the available shortcuts whenever you need to investigate a session, operation, or identity in its corresponding module.

{% hint style="info" %}
The available information depends on the contracted modules and the permissions associated with your profile.
{% endhint %}

***

## How it's organized

Dashboard is divided into four main areas:

* **Main indicators**, to quickly understand volume, conversion, and risk.
* **Modules that require attention**, to identify which modules contain items that need review.
* **Module overview**, to analyze aggregated information for each module.
* **Traffic insights**, to understand the technical context of the recorded traffic.

The filters at the top affect the information shown in Dashboard.

***

## Filter the information

Use the controls at the top to define what information you want to analyze.

<figure><img src="/files/2a47fff03d46fc1aa3d87487ae01cd810d09999f" alt=""><figcaption></figcaption></figure>

### Time range

Select **Time range** to define the period.

Indicators, widgets, and comparisons update according to the selected interval.

When there is a comparison, an equivalent previous period is used as a reference.

### Additional filters

Select **Filter** to apply other criteria available in Dashboard.

The number next to the control indicates how many filters are active.

Widgets update to show only the information that meets the selected criteria.

### Remove filters

Select **Clear all** to remove the applied filters and restore the initial view.

***

## Main indicators

Top indicators give a quick reading of the platform's overall status.

<figure><img src="/files/08edaeef86778aada7402d3383d13d2bbbd203c2" alt=""><figcaption></figcaption></figure>

Each indicator shows:

* The value corresponding to the selected period.
* Additional context about the metric.
* The variation versus the previous period, when available.

### Total operations

Shows the total number of operations recorded during the selected period.

Use it to understand the activity volume and check whether it increases or decreases compared to the previous period.

### Success rate

Shows the percentage of operations completed successfully out of the total number of operations.

A decrease may indicate that it is worth reviewing operation statuses and failure reasons in ID Verification.

### High risk alerts

Shows the number of high-risk alerts that require attention.

Use [**Modules that require attention**](#modules-that-require-attention) and [**Module overview**](#module-overview) to identify where this risk is concentrated.

### High-risk identities

Shows the number of identities classified as having a high risk level.

It can also indicate what percentage they represent out of the total identities analyzed.

Use the tab [**Identities**](#identities) in Module overview or access the module to investigate them in detail.

{% hint style="info" %}
Indicators can detect changes, but they do not explain their cause on their own. Use the rest of Dashboard to put them in context.
{% endhint %}

***

## Modules that require attention

Modules that require attention shows the modules containing sessions, operations, or identities that may require review.

Modules are prioritized according to the level of risk detected.

<figure><img src="/files/39f29630f4593a115effebb2353dc0d308069519" alt=""><figcaption></figcaption></figure>

Each card can show:

* Module name.
* Risk level.
* Number of items requiring attention.
* Main reasons.
* Action to open the corresponding module.

### Behaviour

Shows the sessions that may require review.

The card can differentiate, for example:

* High-risk sessions.
* Very high-risk sessions.

Select **Review sessions** to open Behaviour and continue the investigation.

### Operations

Shows the operations that require attention.

It may include reasons such as:

* Rejected operations.
* Blocked operations.

Select **Review operations** to open ID Verification.

### Identities

Shows the identities that require attention.

It may include those that have reached a high Identity Risk score level.

Select **Review identities** to open Identities.

{% hint style="info" %}
The summary cards explain why a module requires attention. Use the corresponding shortcut to view the specific items and their evidence.
{% endhint %}

***

## Module overview

Module overview allows you to analyze aggregated information for each module without leaving Dashboard.

<figure><img src="/files/a574348d1783ca9df280ccfc965496b47745dc54" alt=""><figcaption></figcaption></figure>

The tabs available in the current version are:

* **Behaviour**
* **ID Verification**
* **Identities**

Select a tab to view its indicators.

The active tab changes the content of Module overview, but does not affect Traffic insights.

***

## Behaviour

The Behaviour tab summarizes session activity and the main risk signals detected.

### Geographic distribution of risk

The map shows how risk is distributed across different locations.

Sessions are grouped geographically and differentiated according to their risk level:

* **High:** 70 or higher.
* **Medium:** between 40 and 69.
* **Low:** under 40.

The size or value associated with each group makes it possible to identify where the activity is concentrated.

Use the map controls to zoom in or out.

{% hint style="info" %}
A geographic concentration of risk does not by itself imply that fraud exists. Use it to decide which locations need a more detailed investigation.
{% endhint %}

### Top countries with highest risk

Shows the countries with the greatest presence of sessions associated with high risk levels.

You can view the information by:

* **Volume**, to compare absolute amounts.
* **Percentage**, to compare each country's weight within the analyzed set.

Use this widget together with the map to identify where the risk is concentrated.

### Session status

Shows how sessions are distributed according to their status.

It may include:

* **Completed**
* **Cancelled**
* **Abandoned**
* **Running**

Each status shows:

* Number of sessions.
* Percentage of the total.

Use this information to identify changes in the proportion of sessions that do not end up being completed.

### Detected smart signals

Shows the Smart signals detected most frequently during the analyzed sessions.

It may include:

* **VPN detected**
* **Proxy detected**
* **Tor detected**
* **Jailbroken device**
* **Bot activity detected**
* **Location spoofing**
* **Velocity anomaly**

Each signal shows:

* Number of detections.
* Percentage of the analyzed set.

{% hint style="info" %}
A Smart signal indicates that a certain condition has been detected. By itself, it does not confirm that the session is fraudulent.
{% endhint %}

Consult the BDS documentation to learn the meaning and context of Smart signals.

### Top related entities

Shows the entities related to the greatest number of sessions.

You can switch between:

* **Devices**
* **IP addresses**
* **Identities**

Each record shows the entity and the number of sessions it is related to.

It may also include relevant signals or characteristics, such as:

* Rooted.
* Jailbroken.
* Frida.
* Other available indicators.

#### Devices

Shows the devices most frequently associated with the analyzed sessions.

Use it to identify devices with a high volume of activity or related to relevant signals.

#### IP addresses

Shows the IP addresses related to the greatest number of sessions.

Use it to detect recurring connections or activity concentrated around the same IP.

#### Identities

Shows the identities related to the greatest number of sessions.

Use it to detect identities with unusually high activity or that appear repeatedly in the analyzed period.

{% hint style="info" %}
A high number of related sessions does not necessarily imply fraudulent activity. Also review the signals, risk, and the entity's context.
{% endhint %}

***

## ID Verification

Select the tab **ID Verification** to view aggregated information about the verification operations.

The widgets on this tab allow you to analyze volume, statuses, results, and the main causes that require attention.

Use this view to identify patterns before opening ID Verification and analyzing a specific operation.

{% hint style="info" %}
The specific content of this tab may differ from Behaviour because each module uses indicators adapted to the type of information it analyzes.
{% endhint %}

***

## Identities

Select the tab **Identities** to view aggregated information about the identities available on the platform.

Use this view to detect risk concentrations, identify identities that require attention, and decide when you need to open the Identities module to investigate a specific case.

***

## Traffic insights

Traffic insights shows cross-cutting information about the technical context of sessions.

These widgets let you understand which systems and networks the analyzed traffic comes from.

<figure><img src="/files/a251b242f249e68f0f06b0601debd6dd880cb7f5" alt=""><figcaption></figcaption></figure>

### Session status

Shows the distribution of sessions according to the operating system used.

It may include:

* **iOS**
* **Android**
* **Windows**
* **Other**

Each category shows:

* Number of sessions.
* Percentage of the total.

Use this information to identify changes in the distribution of the platforms from which users access.

### Network

Shows how sessions are distributed according to the detected network type or context.

It may include:

* **WiFi**
* **VPN**
* **Tor**
* **Other**

Each category shows:

* Number of sessions.
* Percentage of the total.

Use this widget to contextualize the signals related to connectivity and traffic origin.

{% hint style="info" %}
Network type is contextual information. A connection via VPN or Tor does not automatically imply fraudulent activity.
{% endhint %}

***

## How to analyze Dashboard

{% hint style="info" icon="note" %}
To get a quick view of the status of FIP 360:

1. Check the selected period and filters.
2. Review **Total operations** and **Success rate** to understand the volume and overall performance.
3. Check **High risk alerts** and **High-risk identities** to detect changes related to risk.
4. Review **Modules that require attention** to identify which area needs attention first.
5. Use the corresponding CTA to directly investigate sessions, operations, or identities when necessary.
6. View **Module overview** to understand what is causing a variation.
7. In Behaviour, review the map, the countries with highest risk, session statuses, and Smart signals.
8. View **Top related entities** to identify devices, IPs, or identities with relevant activity.
9. Use **Traffic insights** to contextualize activity according to operating system and network.
   {% endhint %}

Dashboard summarizes the status of the platform. Use the specialized modules when you need to analyze evidence or investigate a specific item.
