Ask
Ask a short question inside the Cloud Portal. The answer is assembled there from records this organization already keeps.
Ask
Ask is on the Cloud Portal sidebar, under Overview. A signed-in user asks one sentence about this organization. The portal chrome, example questions, and answers stay in English. The question itself may be written in any supported language listed under the following languages on the Ask page: English, Hebrew, Arabic, Spanish, French, German, Portuguese, Italian, Dutch, Polish, Turkish, Russian, Japanese, Chinese (Simplified), and Korean.
The portal answers from records that organization already keeps, and only from pages that role can open.
Ask does not use an API key or an emailed code. An assistant outside the portal still uses the Customer API.
What you can ask
- Recent alerts, alerts from today, this week, or the last 24 hours
- What changed in the audit log
- What one named policy enforces: GenGuard, FileGuard, VisionX, Vault, ZeroDevice, or HostGuard
- Whether a named station is enrolled, and when it was last seen, including names without a digit or hyphen
- Which stations were not seen today, or a short fleet count: enrolled, seen today, not seen
A follow-up can use the previous answer on the same page. Suggested next questions appear under the answer. "What about it?" uses the station from that answer. "And the policy?" uses the policy from that answer. Refreshing the page clears those earlier answers.
Today and this week use the calendar in Israel (Asia/Jerusalem). Last 24 hours is a rolling window.
From an incident or a Managed Devices row, Ask opens this page with the station already named.
What the answer includes
The sentence names what the card shows. An alert answer names the station, the incident status, and how many alert deliveries are in the list. A fleet answer includes enrolled, seen today, and not seen counts. A station answer names the hostname, status, and last seen time. Open a row in the card to go to that incident or station. Copy places the question, answer, organization name, and timestamp on the clipboard for a ticket or chat.
If a module is not on the subscription, Ask says so instead of returning an empty policy or alert list.
Left out of every answer: evidence frames, file contents, file fingerprints, vault secrets, unlock codes, and agent secrets.
Who can ask what
Anyone who can open the portal can open Ask. The answer still follows the role:
| Question | Who receives it |
|---|---|
| Alerts | Owner, Admin, Analyst |
| Audit log | Anyone who can view the audit log, including Viewer |
| A policy, a named station, or the fleet | Anyone who can open the portal |
A Viewer who asks about alerts sees a note that incident answers stay with Owner, Admin, and Analyst.
Where the question goes
The answer is assembled in the Cloud Portal. Trustity does not send the question or the answer to an AI provider, and does not use them for Trustity's own marketing or product research. Trustity hosts the portal as a processor. The customer is the controller.
The question is written to this organization's audit log, action PORTAL_ASK. People in the organization who can view that log can read it. The stored line keeps the tool names and the first 160 characters of the question, with token-like strings removed.
Read the Privacy Policy for the full notice.