Quickstart

Create the administrator account

The first time the console is opened, it shows a two-step setup instead of a sign-in form: your name, work email, job title, phone and department, then a password whose strength is checked as you type. Completing it creates the first Administrator and signs you in. The setup is never shown again once an administrator exists.

Add your team

Open Accounts and select Add user. Give each person the role that matches their work: Analyst for those who triage and respond, Read-only for those who only need to see. See Users and roles.

Enrol your first endpoint

Open Deploy Agent and follow Guided Install: choose the operating system, choose the group the endpoint joins, and generate the enrolment. Run the install command on the machine. The Verify checklist turns green as the agent registers, connects and checks in. See Deploy agents.

Tell Alertio which machines matter

Open Settings, then Asset Criticality, and mark your most important machines (domain controllers, mail and database servers) High or Critical. Criticality is a quarter of every alert's score; unclassified machines count as Medium. See Risk scoring.

Connect threat intelligence

In Settings, open Integrations, enter your VirusTotal API key and select Test connection. The status should read Verified. See Threat intelligence.

Read the Command Center

Set the time range, then compare Alerts in window with Awaiting triage. The difference is the volume Alertio has taken off your team's plate.

Triage your first alert

Open the Triage Queue on the Active tab. Open the top alert and move it to Triaging so colleagues can see it is taken. Read its score, its context and its AI verdict, then Escalate or Dismiss it. Your decision and your name are recorded. See Triage Queue.