Sentinel — Wireless & Mobile IoT Security

Security dashboard

Live · last scan 7/18/2026, 12:10 PM · 11 networks, 15 APs, 128 mobile/IoT devices

Security score

28 /100

↓ 22 pts over 30 days

Risk exposure

82 /100

Combined wireless + device risk

Assets discovered

154

11 networks · 15 APs · 128 devices

Compliance

58%

Across CIS, NIST CSF, MITRE

Wireless posture

Open networks

3

Weak encryption

1

Hidden SSIDs

1

Duplicate SSIDs

0

Rogue APs

7

Encrypted APs

73%

Mobile & IoT posture

Rooted / jailbroken

6

Outdated OS

23

Unencrypted traffic

4

Unmanaged IoT

17

Rogue devices

4

Compliant devices

61%

Security score trend

30-day rolling score, all assets

Findings by severity

102 open findings, all assets

Critical 12 High 27 Medium 38 Low 19 Info 6

Encryption types

Across 15 access points

AP vendor distribution

Detected hardware vendors

Devices by platform

Android, iOS and IoT firmware split

Radio interfaces in use

Devices seen per interface, fleet-wide

Live signal sweep

Distance from center = risk, across wireless and device assets combined.

Immediate action — 3 assets

Needs review — 4 assets

Nominal — 3 assets

Recent findings

Highest-severity items across wireless and mobile/IoT assets

Severity	Source	Finding	Asset	Detected
Critical	Wireless	Rogue AP impersonating corporate SSID	AP-14F2	12 min ago
Critical	Mobile/IoT	Rooted device with MDM profile removed	MBL-0092	41 min ago
Critical	Wireless	Open network broadcasting on guest VLAN	SSID-Guest2	1 hr ago
High	Mobile/IoT	Unencrypted MQTT broker reachable from guest VLAN	IOT-3381	1 hr ago
High	Wireless	WEP encryption still active on legacy AP	AP-0851	2 hr ago
High	Mobile/IoT	BLE device broadcasting static identifier	BLE-7742	2 hr ago
Medium	Mobile/IoT	iOS build two major versions behind baseline	MBL-0158	3 hr ago
Low	Mobile/IoT	Zigbee coordinator using default network key	ZIG-0021	5 hr ago

Mobile platforms

Live · MDM sync 6 min ago · 128 enrolled devices

Rooted / jailbroken

6

of 128 enrolled devices

OS compliance

64%

23 devices ≥ 2 versions behind

MDM enrolled

112 /128

16 unmanaged / BYOD

Risky app installs

14

side-loaded or excess-permission apps

Platform split

Android, iOS, unmanaged

Attack vector exposure

Devices affected per vector class

Mobile findings

Open findings across Android, iOS and MDM policy

Severity	Platform	Finding	Asset	Detected
Critical	Android	Rooted device with MDM profile removed	MBL-0092	41 min ago
High	Android	Side-loaded app requesting Accessibility Service	MBL-0114	2 hr ago
Medium	iOS	iOS build two major versions behind baseline	MBL-0158	3 hr ago
Medium	Android	Unrestricted USB debugging enabled	MBL-0203	4 hr ago
Low	iOS	Passcode complexity below policy minimum	MBL-0071	6 hr ago

IoT & OT

Live · passive protocol capture · 46 devices seen

Default credentials

9

of 46 IoT/OT devices seen

Unpatched firmware

17

no update in ≥ 12 months

IT/OT segmentation

41%

VLAN boundary coverage

Unauthenticated protocols

6

Modbus/MQTT with no auth

Protocol distribution

Devices observed per protocol

Device criticality

OT assets by process impact if compromised

IoT / OT findings

Open findings across sensors, controllers and gateways

Severity	Protocol	Finding	Asset	Detected
Critical	Modbus/TCP	PLC reachable from corporate VLAN, no auth	PLC-0007	28 min ago
High	MQTT	Unencrypted broker reachable from guest VLAN	IOT-3381	1 hr ago
High	HTTP	IP camera admin panel using vendor default password	CAM-0044	2 hr ago
Medium	BACnet	Building controller firmware 3 releases behind	HVAC-012	5 hr ago
Low	Zigbee	Coordinator using default network key	ZIG-0021	5 hr ago

Cloud computing

Live · last posture sync 18 min ago · 3 accounts connected

Public storage buckets

4

of 27 buckets scanned

Over-privileged IAM roles

11

wildcard actions or resources

Encryption at rest

81%

across storage & DB services

Open security groups

7

0.0.0.0/0 on sensitive ports

Provider distribution

Resources per cloud provider

Misconfiguration category

Open findings grouped by root cause

Cloud findings

Open findings across IAM, storage and network config

Severity	Provider	Finding	Asset	Detected
Critical	AWS	S3 bucket publicly readable and listable	S3-BACKUPS	33 min ago
High	AWS	IAM role permits iam:* on all resources	ROLE-DEVOPS	1 hr ago
High	Azure	NSG allows RDP 3389 from any source	NSG-WEB01	2 hr ago
Medium	GCP	Service account key not rotated in 400+ days	SA-CI-BOT	4 hr ago
Low	AWS	CloudTrail logging disabled in one region	CT-EU-W2	6 hr ago

Cryptography

Live · TLS/cert sweep 2 hr ago · 31 endpoints checked

Weak cipher suites

5

of 31 endpoints checked

Certs expiring < 30d

3

renewal action needed

TLS 1.2+ coverage

87%

remaining on TLS 1.0/1.1

Key rotation compliance

68%

within policy interval

TLS version distribution

Across 31 checked endpoints

Certificate expiry timeline

Days remaining, next 6 certs

Cryptography findings

Open findings across TLS config, certs and key management

Severity	Category	Finding	Asset	Detected
Critical	Protocol	TLS 1.0 still accepted on legacy VPN endpoint	VPN-EDGE1	50 min ago
High	Cipher	RC4 cipher suite offered on internal API gateway	API-GW-02	2 hr ago
Medium	Certificate	Self-signed cert in use on internal admin panel	ADM-0091	3 hr ago
Medium	Key mgmt	Signing key not rotated past 400-day policy window	KMS-SIGN1	5 hr ago
Low	Certificate	Certificate expiring in 12 days, renewal not queued	WWW-EDGE	7 hr ago

Learn center

Methodology, scenarios, pitfalls, defensive audit commands and self-checks for modules 16–21

Security frameworks

How each framework works, an attack scenario mapped to it, the tools used to apply it, and its impact on enterprise security

Network topology

Logical map of how discovered assets connect, tier by tier

Perimeter to endpoint

Click a node’s badge count to jump to its module — risk-colored nodes have open critical/high findings

Perimeter

Internet

Untrusted

▼

Edge firewall

Ingress / egress filtering

▼

Core

Core switch

VLAN segmentation

Cloud VPCs

AWS / Azure / GCP · 19 findings

▼

Access & segments

15 access points

3 open, 1 WEP, 7 rogue

Guest VLAN

Isolated, DHCP-scoped

OT / IoT VLAN

Modbus, MQTT, BACnet, Zigbee

▼

Endpoints

11 wireless networks

SSIDs broadcast on-site

128 mobile/IoT devices

6 rooted · 4 rogue

Segment summary

Asset counts and open findings per logical segment

Segment	Assets	Open findings	Highest severity
Corporate wireless (11 SSIDs)	11	9	Critical
Access point fleet	15	14	Critical
Mobile / BYOD	76	31	Critical
IoT / OT VLAN	52	27	High
Cloud VPCs	3 accounts	19	High
TLS-terminating endpoints	6	4	Medium

Executive reports

Board-ready summary of current risk posture and framework alignment

Security score

28 /100

↓ 22 pts over 30 days

Open findings

102

12 critical · 27 high

Assets in scope

154

11 nets · 15 APs · 128 devices

Overall compliance

58%

Blended across frameworks below

Narrative summary

Plain-language read of this cycle’s posture, for a non-technical audience

Overall security score dropped 22 points this cycle, driven mainly by rogue access points impersonating the corporate SSID and a rooted mobile device that had its management profile removed. Twelve findings are critical and need attention this week. Cloud and cryptography posture are comparatively stable. Compliance sits at 58% blended across CIS Controls, NIST CSF, and MITRE ATT&CK coverage — the biggest gap is in Protect-category wireless controls.

Framework alignment

Blended score contribution by framework — open the Frameworks section for detail

Framework	Coverage	Trend	Primary gap
CIS Controls (IG1)	64%	↑ 3%	Secure configuration (Control 4)
NIST CSF	55%	↓ 6%	Protect — data-in-transit (PR.DS-2)
MITRE ATT&CK detection coverage	49%	↓ 4%	Credential Access tactic
Regulatory compliance	62%	— flat	Device-level evidence for PII access

Scan history

Past audit runs across wireless, mobile/IoT, cloud and cryptography scope

Started	Scope	Assets scanned	New findings	Duration	Status
7/18/2026, 12:10 PM	Full — all modules	154	6	14m 22s	Complete
7/17/2026, 09:05 AM	Wireless & mobile/IoT	139	4	9m 47s	Complete
7/15/2026, 08:40 PM	Cloud (3 accounts)	3	2	6m 12s	Complete
7/14/2026, 07:55 AM	Cryptography — TLS endpoints	6	1	2m 08s	Complete
7/12/2026, 11:30 PM	Full — all modules	151	9	15m 03s	Partial — 2 assets unreachable
7/9/2026, 06:15 AM	Wireless & mobile/IoT	133	7	10m 51s	Complete

Settings

Scan behavior and notification preferences for this workspace

Scanning

Live scan auto-refresh

Poll for new findings while the dashboard is open

Include rogue-device fingerprinting

Adds passive BLE/Wi-Fi fingerprint capture to each scan

Scan cloud accounts nightly

Automatically re-check IAM and storage config every night

Notifications

Critical finding alerts

Immediate notification when a critical-severity finding opens

Weekly executive summary

Emails the executive report to workspace admins every Monday

Framework coverage digest

Notify when CIS/NIST/MITRE coverage % changes by more than 5 points