NEXUS BREACH COMMAND

When compromise is suspected,
stay in command.

Live compromise detection, containment and recovery. Bring meaningful activity, confirmed incident evidence and the next review steps into one dedicated Nexus PRO workspace.

AWARENESS BEFORE EMERGENCY

Know what changed.
Keep normal work in perspective.

Breach Command shows recent activity and the outcome of supported maintenance checks. Routine updates stay distinguishable from incident evidence, helping the important signals remain visible.

A clearer daily picture

Verified safe
Activity that completed the relevant verification.

Awaiting verification
Work that still needs a completed check.

Needs review / Escalated
A clear distinction between attention and an incident.

REDLINE / EMERGENCY STATE

A clear signal.
A deliberate response.

REDLINE is the emergency state within Breach Command. It makes supported incidents, containment and recovery visible while keeping the evidence and response status together.

Observation is not the same as action.

Shadow
Observe, preserve evidence and explain the response that Active mode would permit.

Active
Permit only the supported, reversible actions selected by the administrator.

Shadow is the safe default. Active containment is opt-in.

BLACK BOX

Keep an incident history
beyond the affected website.

When its licensed connection is available, Black Box preserves a bounded incident record away from the protected installation. Connection and preservation states remain visible.

POWERED BY SENTINEL

Signals need context.

Sentinel is the engine behind Breach Command. It brings supported compromise signals together so isolated observations do not automatically become incident claims.

Prepare before an incident.

A safe readiness drill checks the Breach Command setup without creating a real incident or quarantining files. Recovery validation helps review whether the original compromise condition and supported artifacts remain present.

No. Its supported autonomous actions are bounded and controlled by your selected mode and policy. It does not promise unrestricted repair or whole-site takeover.

No. It preserves a bounded incident history. Keep an independent website backup strategy.

Yes. An active Nexus PRO licence is required to start new Breach Command incidents. Remote Black Box also needs its configured licensed connection.

Breach Command is product functionality. A managed incident-response or malware-cleanup service is a separate arrangement.

Choose your Nexus coverage.

One complete platform for your website—or your agency portfolio.