Skip to main content

​
Can I use Wirespeed on my phone?

Wirespeed is installable as a Progressive Web App, so you can add it to your home screen and open it like a native app. There is no separate App Store or Play Store listing.
  • iPhone / iPad: Open app.wirespeed.co in Safari, tap Share, then Add to Home Screen.
  • Android: Open app.wirespeed.co in Chrome, then tap Install app or Add to Home screen from the browser menu.

​
How do I set up integrations as a non-admin user?

If you are not an administrator for the account you are trying to integrate, you have a couple options:
  • If the integration is an OAuth integration, there will be a “Copy Link for Admin” button that you can use to copy and share the link to your account administrator. They will be able to go to that link, configure OAuth consent and will be notified if the integration worked successfully.
  • If the integration requires API keys or other credentials, the relevant documentation can be found underneath the Integrations documentation and shared with your administrator. Once they have gathered the appropriate information and shared it with you, it can be entered into the application.

​
What timezones do you display your data in?

All datetimes shown in the UI are presented in your timezone. All datetimes returned from the API are provided in UTC.

​
What is an automation lock?

You may see terms like “VIP Locked” or “Technical User Locked”. This means that a user on your team has manually changed the status of that record to be enabled/disabled and is excluded from any future automations. This is to prevent a disabled VIP from be reenabled the next time the automation is run. Every record with a lock has the ability to remove the lock by going to its table, clicking on the 3-dot menu, and selecting “Disable lock”.

​
Why isn’t my team receiving emails? / How do I prevent Wirespeed emails from going to spam?

Ensure your organization’s spam filters have wirespeed.co allow-listed, or your team may not receive emails as expected. See instructions to accomplish this for your integrated email service:

​
What does “Productivity logs are not available, skipping monitor” mean?

That timeline message is informational. It usually means the Identity Login case monitor did not see enough recent productivity log volume in Wirespeed to run. See Case monitors and productivity logs under Introduction to Verdicts for which integrations supply this data and what to check.

​
Does Wirespeed detect insider threats?

No. Insider threat is not part of Wirespeed’s threat model. Wirespeed is built to detect external adversaries, compromised accounts, malware, and unauthorized access. We do not investigate or escalate activity from trusted users who are acting with legitimate credentials and permissions, even when that activity is harmful or policy-violating. In practice, this means Wirespeed is optimized to detect when an attacker gets in—not when an authorized employee misuses their access. Alerts that reflect normal use of permissions a user already holds may not result in a case.

​
How does Wirespeed approach penetration testing / simulated security detections / red-team activity?

We respond to all penetration tests and red team activities as if they represent an active breach, given the possibility of concurrent real threats in your infrastructure. If scheduling this activity, it may be prudent to add corresponding exclusions highly specific to the expected activity for the time alotted if (and only if) you’d rather not see us generate cases for the simulation.