Dashboard Overview
The SecureCheck Dashboard is a separate web application, not part of the OpenClaw Shield plugin. It's an optional service for centralized monitoring across multiple bots.
The SecureCheck dashboard at dashboard.securecheck.io provides a web interface for monitoring threats, managing rules, and analyzing security metrics across all your bots.
Dashboard vs Plugin
| Feature | OpenClaw Shield Plugin | SecureCheck Dashboard |
|---|---|---|
| What is it? | OpenClaw plugin installed locally | Separate web application |
| Where? | Runs in your OpenClaw instance | Hosted at dashboard.securecheck.io |
| Requirements | Required for Shield to work | Optional, requires botToken |
| Threat Detection | ✅ Yes | ❌ No (displays only) |
| Local Rules | ✅ Yes | ❌ No |
| View Alerts | ✅ Via /shield commands | ✅ Via web UI |
| Manage Rules | ✅ Via config file | ✅ Via visual editor |
| Multi-bot | ❌ Per-bot only | ✅ Centralized |
| Analytics | ✅ Basic stats | ✅ Advanced charts |
| Costs | ✅ Free | ✅ Free tier available |
In short:
- Plugin = Required, does the actual filtering
- Dashboard = Optional, provides visibility and management UI
Prerequisites
To use the dashboard:
- Install OpenClaw Shield plugin (required)
- Get a bot token from dashboard signup
- Configure plugin with your
botToken - Enable backend alerts in config
Plugin Configuration
{
"plugins": {
"openclaw-shield": {
"enabled": true,
"botToken": "sct_your_token_here",
"notifications": {
"backendAlerts": true
}
}
}
}
Without this configuration, the plugin still works but won't send data to the dashboard.
Accessing the Dashboard
Visit dashboard.securecheck.io and log in with your bot token.
Dashboard Sections
Overview / Home
URL: /dashboard
Real-time summary of your bot's security:
- Total Alerts - Number of threats detected today
- Threat Types - Breakdown by category (SQL injection, XSS, etc.)
- Top Offenders - Users with most violations
- Alert Timeline - Threats over time (chart)
Key Metrics:
- Messages scanned today
- Block rate (% of messages blocked)
- Most active channels
- Average response time
Alerts
URL: /dashboard
View all security alerts from your bots:
Features:
-
Filter by:
- Date range
- Threat type
- Sender ID
- Channel ID
- Action (blocked/flagged)
-
Search - Full-text search in message content
-
Export - Download as CSV or JSON
-
Details - Click alert to see full message and metadata
Alert Fields:
- Timestamp
- Direction (inbound/outbound)
- Sender ID (hashed for privacy)
- Channel ID
- Threat categories
- Action taken
- Message preview (redacted)
Rules
URL: /dashboard/rule-builder
Manage security rules for your bots:
Built-in Rules:
- View default rules
- Enable/disable rules
- Adjust severity
- Fork rules to customize
Custom Rules:
- Create new rules
- Edit existing rules
- Test rules before deploying
- Version history
Rule Builder:
- Visual rule builder (drag-and-drop)
- Advanced rule editor (JSON)
- Test panel (validate rules)
- Import/export rules
Rule Types:
- Regex patterns
- Keyword matching
- Semantic similarity
- Compound rules (AND/OR logic)
Token Management
URL: /dashboard
Manage API tokens for your bots:
Features:
- View active tokens
- Generate new tokens
- Revoke compromised tokens
- View per-token statistics
Token Info:
- Creation date
- Last used
- Message count
- Alert count
Statistics
View analytics and trends:
Charts:
- Threats over time (line chart)
- Threat types (pie chart)
- Busiest channels (bar chart)
- Top offenders (table)
- Rate limit hits (line chart)
Metrics:
- Total messages scanned
- Block rate %
- Most common threat types
- Peak traffic times
Time Ranges:
- Last hour
- Last 24 hours
- Last 7 days
- Last 30 days
- Custom range
Common Tasks
View Recent Alerts
- Navigate to Dashboard
- Alerts are shown in the main view
- Filter by date range: "Last 24 hours"
- Click an alert to see details
Create Custom Rule
- Navigate to Rule Builder
- Click "Create Rule"
- Choose rule type (regex, keyword, semantic)
- Enter pattern or condition
- Test rule with sample messages
- Click "Save" to deploy
Check Bot Activity
- Navigate to Dashboard
- View "Messages Scanned" metric
- Check "Alert Timeline" chart
- Review "Top Channels" list
Export Alert Data
- Navigate to Dashboard
- Set date range filter
- Click "Export" button
- Choose format (CSV/JSON)
- Download file
Manage Bot Tokens
- Navigate to Dashboard
- Scroll to "Tokens" section
- Click "Generate Token" for new bot
- Click "Revoke" to disable compromised token
- View token statistics
Alert Details
Click any alert to view full details:
Information Shown:
- Message timestamp
- Direction (inbound/outbound)
- Channel name
- Sender ID (hashed)
- Threat categories detected
- Rule that triggered
- Action taken (blocked/flagged)
- Message preview (redacted)
- Bot that reported it
Actions:
- Mark as false positive
- Add sender to allowlist
- Create rule exception
- Export alert data
Rule Management
Creating Rules
- Click "Create Rule"
- Enter rule details:
- Name
- Description
- Pattern (regex or keyword)
- Action (block/flag/monitor)
- Severity (critical/high/medium/low)
- Test rule with sample text
- Save and deploy
Testing Rules
Before deploying:
- Enter test message
- Click "Test"
- See if rule matches
- Adjust pattern if needed
- Deploy when satisfied
Rule History
View changes to rules:
- Version number
- Changed by
- Date modified
- What changed
- Revert to previous version
Keyboard Shortcuts
| Action | Shortcut |
|---|---|
| Search alerts | / |
| View dashboard | g then d |
| View rules | g then r |
| Help | ? |
Mobile Access
The dashboard works on mobile devices:
- View recent alerts
- Check bot status
- Quick rule edits
- Push notifications
Tip: Add to home screen for app-like experience.
Dashboard Tips
Daily Workflow
- Check "Overview" for anomalies
- Review recent alerts
- Verify no false positives
- Check system health
Weekly Tasks
- Analyze "Statistics" trends
- Review and update rules
- Export alerts for records
- Check top offenders
Responding to Threats
- Check alert details
- Identify threat type
- Review sender history
- Take action:
- Add to allowlist (false positive)
- Create new rule (new threat)
- Revoke token (compromised bot)
- Report to authorities (serious threat)
Need Help?
- GitHub Issues: https://github.com/securecheckio/openclaw-shield/issues
- Documentation: https://docs.securecheck.io
Working Without Dashboard
The OpenClaw Shield plugin works perfectly without the dashboard:
Local-only features:
- ✅ All threat detection (regex, keywords, semantic)
- ✅ Rate limiting
- ✅ Redaction
- ✅ Allowlist
- ✅ Local notifications
- ✅ Shield commands (
/shield status,/shield test, etc.) - ✅ File logging
What you miss:
- ❌ Web UI for viewing alerts
- ❌ Centralized multi-bot monitoring
- ❌ Community threat intelligence
- ❌ Visual rule builder
- ❌ Advanced analytics
Most users don't need the dashboard! The plugin is fully functional standalone.
Shield is designed to work offline and locally. The dashboard is purely an optional enhancement for teams managing multiple bots.
The dashboard is an optional web UI for centralized monitoring - not required for Shield protection.