| Dashboard | At-a-glance — fleet size, recent denies, top tools, agents at risk. |
| Agents | Every agent in the org, sorted by risk score. Click into one for activity, identities, and a 24h sparkline. |
| Policies | Author, version, dry-run, publish. Templates for common patterns. |
| Insights | Decision timeline, top tools, top deny reasons, risk distribution — across your fleet for a chosen window. |
| Incidents | Auto-opened on deny spikes and critical DLP. Triage queue with a live deny chart. |
| Enrollment | Manage enrollment tokens. Create, revoke, renew. |
| Audit log | Every governed tool call, filterable. Click a row for the trace. |
| Settings | Account, workspace, API endpoint health. |