eBrigade Cybersecurity module
Your security posture, scored out of 100 and fixable in one click
A single dashboard that continuously audits your configuration, tells you exactly what to harden first, shows you on a world map where your users log in from, and lets you cut off a suspicious session on the spot. Enough to answer a CISO or a call for tenders without preparing a single file.
These buttons are about the full eBrigade subscription: this module is included at no extra cost in every plan.
Illustration · sample data
What is the eBrigade Cybersecurity module?
A built-in security dashboard: a score out of 100, prioritised recommendations you can fix in one click, active sessions you can block instantly and a world map showing where logins come from. It is included at no extra cost in every eBrigade plan.
Security is something you hope for more than you measure
How many accounts have actually enabled the second factor? Do your passwords expire? How many administrators have full powers? Are your audit logs kept long enough for an investigation? Without a dedicated dashboard, these answers have to be pieced together by hand, one configuration screen at a time — and the day an IT director, a CISO or a call for tenders demands proof of your posture, you have nothing to show. Meanwhile, a brute-force login attempt or a session open on a compromised computer goes unnoticed.
An operational security view, with no external console or extra cost
The module brings together, on a single eBrigade screen, the audit of your configuration, indicators for the last 30 days, the login map and control of active sessions. Each weakness is scored, explained and comes with a direct link to fix it. You see at a glance where you stand and what still needs hardening, and you can act immediately — block an account, roll out MFA across the board, extend log retention — without leaving the platform.
What you can do with Cybersecurity
Eight weighted criteria are assessed automatically — password complexity (10) and minimum length (15), lockout threshold after failed attempts (10), periodic expiry (10), MFA coverage rate among staff (20), ratio of administrator accounts (10), SSO enabled (10), WebAuthn keys (5) and audit log retention (10) — with a tick/cross breakdown and the scoring scale for each line.
Each weakness generates a recommendation classed as danger, warning or information, explained in concrete terms (e.g. “only 60% of staff have MFA enabled, target 90%”), with a Fix link pointing to the exact configuration screen to change.
IP addresses from the last 30 days are geolocated in batches via ip-api.com (with a 30-day local cache), then displayed on a Leaflet / OpenStreetMap map. The size of each dot reflects the volume of events, and a click reveals the city, country and number of logins.
The logged-in users view lists each active session with photo, login start, last action, operating system, browser and IP address. A single button blocks or unblocks an account instantly — the session is cut off without delay.
After a configurable number of failed login attempts, the account concerned is temporarily locked, then automatically unlocked after 30 minutes. The dashboard counts failed attempts and blocked accounts over 30 days.
eBrigade supports WebAuthn authentication (ES256 / P-256): Touch ID, Face ID, Windows Hello and physical USB/NFC security keys. Synced passkeys (iCloud, password managers) are recognised across several devices, which eliminates the risk of phishing on equipped accounts.
Step by step
The dashboard calculates a score out of 100 from 8 weighted criteria (password complexity and length, lockout threshold, expiry, MFA coverage rate, administrator ratio, SSO, WebAuthn keys, log retention) and shows the point-by-point breakdown with a green tick or red cross on each criterion.
Detected weaknesses surface as recommendations ranked by severity (danger, warning, information), each explained in one sentence and accompanied by a Fix link that takes you straight to the right settings screen.
Four 30-day indicators (suspicious events, failed logins, blocked accounts, accounts with MFA enabled) and a world map of geolocated IPs give you a near-real-time view of what is happening on your instance.
From the list of logged-in users, you see who is online with their system, browser and IP, and you block or unblock an account in one click, with immediate effect.
Where this module really pays off
Fire and rescue services (SDIS) and civil protection: prove a quantified security posture to the supervisory authority (score out of 100, MFA coverage rate, log retention) during an audit or a contract renewal.
Local authorities and public bodies: meet GDPR requirements and the security questionnaires in calls for tenders with factual indicators, without bringing in an external provider.
Associations with large memberships: spot excessive administrator accounts on a single screen and roll out multi-factor authentication to volunteers.
Patient transport and healthcare: monitor the geographical origin of logins and instantly cut off a session opened from an unexpected computer or country.
Multi-site IT directors / CISOs: track failed login attempts, blocked accounts and suspicious events over a rolling 30-day window.
Private security and guarding: require physical security keys or biometrics (Touch ID, Windows Hello) for sensitive accounts to eliminate the risk of phishing.
Frequently asked questions
How is the security score calculated?
It adds up 8 weighted criteria assessed automatically on your instance: password complexity (10 points), minimum length (up to 15), lockout threshold after failed attempts (10), periodic expiry (10), MFA coverage rate among staff (up to 20), ratio of administrator accounts (10), SSO enabled (10), presence of WebAuthn keys (5) and audit log retention (10). The total, capped at 100, is displayed with a point-by-point breakdown.
Does the module really block a session in progress?
Yes. From the list of logged-in users, you see each active session (staff member, system, browser, IP, last action), and a button switches the account to blocked immediately. The user can no longer log in or use the application until you unblock them.
Does IP geolocation comply with the GDPR?
The map shows an approximate, city-level location, obtained via the ip-api.com service and cached locally. It is used to spot an unusual login origin, not to track a user. The source is credited below the map, and the map is only displayed if the enhanced audit columns are enabled on your instance.
What are the “suspicious events” counted over 30 days?
They are audit log entries in the security category (notably login failures and lockouts), aggregated over a rolling 30-day window. The dashboard also shows the total number of failed login attempts, the number of accounts currently blocked and the number of accounts with MFA enabled.
Do passkeys require any special hardware?
No. WebAuthn authentication works with the biometrics already built into devices (Touch ID and Face ID on Apple, Windows Hello on PCs) or with a physical USB/NFC security key. eBrigade supports the FIDO2 standard (ES256/P-256) and recognises the same synced passkey across several devices.
Is the Cybersecurity module included in eBrigade?
Yes, it is one of the included features. The dashboard relies on data already present in the platform (configuration, audit logs, accounts, sessions), so the more you harden your settings and roll out MFA, the more your score improves — with no option to buy.