Log in Sign up
Core Concepts

Global Intelligence

The decentralized "Hive Mind" that powers AuraGuardian.

How does Hive Mind / Global Intelligence work?

AuraGuardian is not a set of isolated firewalls; it is a connected defense grid. When a single node detects a confirmed threat, that intelligence is broadcast to the entire network.

How it works:

  1. Detection: Site A detects a SQL Injection attack from IP 1.2.3.4.
  2. Verification: The Agent blocks the request and reports the telemetry to the Aura Cloud.
  3. Consensus: The Cloud Brain verifies the signature against known bot patterns.
  4. Broadcast: IP 1.2.3.4 is added to the Global Blocklist.
  5. Immunization: Within 60 seconds, Site B, Site C, and Site D automatically download the updated blocklist.

What data points does Global Intelligence track?

The Global Intelligence database tracks:

  • Banned IPs: Malicious actors caught attacking other nodes.
  • Toxic ASNs: Hosting providers known for hosting botnets (e.g., bulletproof hosting).
  • Scanner Signatures: User-Agent strings associated with vulnerability scanners.