Home PlatformNova Product Tour

Nova platform

Explore Nova in practice

Explore the depth of Nova. Follow the security work.

Name: Nova
Brand: Nova

Follow the analyst experience from an exposed cloud resource or a suspicious event to the evidence needed for a decision. Explore assets and findings, alert details, behavioral anomalies, threat maps, and Velora assessments, then see how detection review and DRX response keep the next steps connected.

Request a private demo Explore Nova in practice

Nova Product Tour Follow the analyst experience from an exposed cloud resource or a suspicious event to the evidence needed for a decision. Explore assets and findings, alert details, behavioral anomalies, threat maps, and Velora assessments, then see how detection review and DRX response keep the next steps connected.

01CoverageKnow what can be assessedFreshness and gaps visible

02ExposureTrace credible pathsAssets and identities connected

03PriorityFocus on likely impactRisk with supporting context

04InvestigationUnderstand why it mattersEvidence and missing information

05DecisionMove with the right controlOwner and checkpoint clear

One continuous caseEvidence, scope, and uncertainty stay attached to the decision.

Follow an issue from discovery to response

Start by reviewing the assets and data available in Nova. Then see how exposure, related alerts, and investigation results help your team decide what to investigate or remediate.

Security workflow

Connect
Contextualize
Decide

Product experience

See how work moves through Nova

Move through current product views one step at a time. Each view answers a different security question and keeps the available evidence and limits visible.

Collector catalog Explore supported collectors by provider and use case, including cloud activity, identity, network, workload, audit and security evidence.

Security event search Search 90 days of retained security activity with NQL, field filters and a normalized event table to validate the evidence behind an alert or investigation.

Cloud security command center Bring cloud inventory, posture, exposure, attack paths and coverage into one CNAPP operating view, with incomplete evidence kept visible.

Cloud asset inventory Work from a searchable cloud asset inventory with provider, region, ownership, exposure, freshness and posture context available for each asset.

Cloud finding details Open a finding to review its risk, affected resource, evidence, lifecycle, mapped controls and governed follow-up without losing the wider posture context.

Detection alert posture Understand alert volume, risk, review progress, control strength and the 90-day activity trend in one operational view.

NovaSignal alert scoring Review prioritized alerts, confidence, drift clusters, suppression candidates and how scoring changes across the selected window.

Why NovaSignal prioritized an alert Review the alert score alongside severity, confidence and the security signals that contributed to the assessment.

Qyronis overview See learned entities, behavioral anomalies, intelligence coverage and the evidence available for analyst review.

Threat intelligence feeds Assess 90 days of indicator activity, high-risk intelligence, source contribution and geographic concentration without treating map location as attacker attribution.

Nova Atlas Connect detection activity to geographic context and move from map concentration to the supporting alert evidence.

Proactive threat hunting Review 90 days of proactive hunting reports, suggested investigations and supporting evidence so analysts can choose the next hunt with clear context.

Alert operations Manage alert workload by status, severity, score, owner and investigation progress while keeping the source evidence available for triage.

NADE detection proposals Review AI-proposed detection rules awaiting analyst assessment. Proposals remain separate from active detection rules.

Cloud compliance evidence Review assessed controls and the evidence available for each framework.

Velora command center See active investigations, evidence coverage, risk themes and unresolved questions before opening the deeper reasoning and entity context.

Velora security assessment Review the current Security World State, evidence completeness, connected risk themes, affected entities, uncertainty and decision authority. Velora explains what the evidence supports and does not authorize an action.

1 / 17

01 · Know what is visible

Review discovered assets, internet exposure, and available security data.

Nova separates observed posture from missing or stale evidence, giving teams an honest starting point before they prioritize risk.

Explore security coverage

Review discovered assets, internet exposure, and available security data. Nova separates observed posture from missing or stale evidence, giving teams an honest starting point before they prioritize risk.

Expected sources

Cloud activityConnected

Identity activityConnected

Endpoint signalsEvidence delayed

Evidence scopeFreshness + scopeSource-aware

Coverage posture

ObservedEvidence current

GapDecision limited

02 · Find the path to impact

Connect the weakness to reachable systems, identities and business impact.

Attack-path context helps teams distinguish an isolated finding from a credible route that deserves remediation first.

Explore attack surface management

Connect the weakness to reachable systems, identities and business impact. Attack-path context helps teams distinguish an isolated finding from a credible route that deserves remediation first.

External exposureReachable serviceObserved

Identity reachAccess relationshipEvidence checked

Protected resourcePotential impactPrioritize review

Evidence available Coverage partial Owner required

03 · Focus analyst attention

Prioritize the alert with risk, confidence, ownership and age in context.

Analysts can understand why work deserves attention and move it into a clear ownership and review path.

Explore detection prioritization

Prioritize the alert with risk, confidence, ownership and age in context. Analysts can understand why work deserves attention and move it into a clear ownership and review path.

Incoming signals

Activity change

Cloud finding

Threat match

Context

EntityExposureThreatEvidence

Priority queue

Review firstReachable riskEvidence linked

InvestigateContext incomplete

MonitorLow-impact activity

04 · Begin with the reason

Bring the trigger, affected context and next questions into the investigation.

Nova keeps the alert basis, relevant entities and suggested follow-up connected so analysts can validate rather than reconstruct.

Explore evidence-led investigation

Bring the trigger, affected context and next questions into the investigation. Nova keeps the alert basis, relevant entities and suggested follow-up connected so analysts can validate rather than reconstruct.

Observed sequence

Observed activityControl-plane change

Behavior changeOutside recent baseline

Related evidenceSource events

Assessment

KnownActor and action observed

UnknownBusiness intent

ConflictCoverage is incomplete

Analyst next stepCheck who acted, which systems were affected and whether the change was expected.Evidence ready for review

05 · Review the findings

Keep supporting evidence, conflicts and unknowns beside the assessment.

Check the supporting events and any conflicting or missing information. If the data is insufficient, the investigation should remain open for further review.

See why Nova is different

Keep supporting evidence, conflicts and unknowns beside the assessment. Check the supporting events and any conflicting or missing information. If the data is insufficient, the investigation should remain open for further review.

Observed sequence

Observed activityControl-plane change

Behavior changeOutside recent baseline

Related evidenceSource events

Assessment

KnownActor and action observed

UnknownBusiness intent

ConflictCoverage is incomplete

Analyst next stepCheck who acted, which systems were affected and whether the change was expected.Evidence ready for review

06 · Prepare the response

Move an approved decision into a controlled response workflow.

Review the proposed action, affected systems, and required approvals. Track the result after the action is run.

Explore incident response

Move an approved decision into a controlled response workflow. Review the proposed action, affected systems, and required approvals. Track the result after the action is run.

Incoming signals

Activity change

Cloud finding

Threat match

Context

EntityExposureThreatEvidence

Priority queue

Review firstReachable riskEvidence linked

InvestigateContext incomplete

MonitorLow-impact activity

07 · Retain the outcome

Keep the reported result connected to the decision that produced it.

Nova preserves the evidence, ownership and outcome so teams can review what happened after the immediate work is complete.

Explore Nova operations

Keep the reported result connected to the decision that produced it. Nova preserves the evidence, ownership and outcome so teams can review what happened after the immediate work is complete.

Observed sequence

Observed activityControl-plane change

Behavior changeOutside recent baseline

Related evidenceSource events

Assessment

KnownActor and action observed

UnknownBusiness intent

ConflictCoverage is incomplete

Analyst next stepCheck who acted, which systems were affected and whether the change was expected.Evidence ready for review

Cloud security and SecOps

Find risks, investigate threats and coordinate response.

CONTEXT

One context across teams

Cloud security teams and SOC analysts can work on the same investigation.

PRIORITY

Priority with a visible basis

Risk, exposure, confidence, ownership and evidence quality explain why work moves first.

TRUTH

Uncertainty stays explicit

Unknown, incomplete and unavailable evidence never becomes a confident result.

OUTCOME

The result stays with the decision

Approval, progress and the reported outcome remain connected to the evidence that justified the work.

Evaluate Nova

See how Nova fits your cloud security workflow.

In a private briefing, we will map Nova to your stack, confirm what connects and focus the evaluation on the outcome your team cares about.

Request a private demo