Security Dashboard

Monitor active sessions, access attempts, account health, and system exposure

Admin Access Only
55
/ 100
Security Score At Risk

Based on 14 security checks across sessions, credentials, files and server config.

Files Clean
Passwords All fresh
Locked accts None
Inactive users 15 found
Login spike Normal
Off-hours None
Sec headers 9/9 passing

4

Active Sessions

0

Failed Logins (7d)

0

Failed (24h)

0

Locked Accounts

0

Exposed Files

15

Inactive Users

Active Sessions
Currently logged-in users
User Department IP / Location ISP Logged In Last Active Action
Arjun Mehta
godsonchittilapilly@gmail.com
 Admin 88.156.176.218
Warsaw, Poland
Vectra S.A 2026-07-09 00:43:45 2026-07-09 00:43:45
Kiran Patil
kiran@medcare-equip.in
 Sales 88.156.176.218
Warsaw, Poland
Vectra S.A 2026-07-09 00:42:53 2026-07-09 00:42:53
Sonia Thomas
sonia@medcare-equip.in
 Sales 88.156.176.218
Warsaw, Poland
Vectra S.A 2026-07-09 00:42:01 2026-07-09 00:42:01
Rahul Sharma
rahul@medcare-equip.in
 Service 88.156.176.218
Warsaw, Poland
Vectra S.A 2026-07-08 18:12:07 2026-07-08 18:13:52
Failed Login Attempts
Last 7 days — brute-force indicators
The auth_log table has been created. Update login.php's failed-login branch to insert a row: INSERT INTO auth_log (attempted, ip_address, user_agent, success, reason) VALUES (?, ?, ?, 0, ?)

No failed attempts recorded

Auth logging will populate this once enabled in login.php

Account Lock Status
Accounts currently locked due to failed attempts

No locked accounts

All active user accounts are accessible

Password Health
Employees who haven't changed password in 90+ days — 0 at risk
Employee Department Last Password Change Age Status
All passwords are within the 90-day policy
Showing employees with passwords older than 90 days
Sensitive File Exposure
Debug, diagnostic and test files publicly accessible
All clear. No dangerous files detected in the web root.
debug.php
Debug console
Safe
debug_database.php
DB debug
Safe
debug_access.php
Access debug
Safe
debug_sla_enforcement.php
SLA debug
Safe
session_debug.php
Session debug
Safe
diagnostic.php
Diagnostics
Safe
complete_diagnostic.php
Complete diagnostics
Safe
collections_diagnostic.php
Collections diagnostics
Safe
admin_diagnostic.php
Admin diagnostics
Safe
sla_class_diagnostic.php
SLA diagnostics
Safe
calendar_diagnostic.php
Calendar diagnostics
Safe
email_diagnostics.php
Email diagnostics
Safe
chat_diagnostic.php
Chat diagnostics
Safe
test_system.php
System test
Safe
test_presence.php
Presence test
Safe
test_sla_breach.php
SLA test
Safe
test_collection.php
Collection test
Safe
quick_test.php
Quick test
Safe
demos_test.php
Demos test
Safe
smtp_diagnostic.php
SMTP diagnostic
Safe
smtp_test_tool.php
SMTP test
Safe
email_test_tool.php
Email test tool
Safe
install_phpmailer.php
Mailer installer
Safe
scan_files.php
File scanner
Safe
find_files.php
File finder
Safe
checktable.php
Table checker
Safe
fix_redirect_issue.php
Fix script
Safe
fix_leads_javascript.php
Fix script
Safe
fix_profile.php
Fix script
Safe
admin_cleanup_panel.php
Admin cleanup
Safe
admin_attendance_FORCE_FIX.php
Force-fix script
Safe
generate_sample_audit_data.php
Data generator
Safe
migrate_audit.php
Migration script
Safe
convert_to_ist.php
Conversion script
Safe
catch_errors.php
Error catcher
Safe
.env
.env file
Safe
phpinfo.php
PHP info
Safe
info.php
PHP info
Safe
38 files checked — none found
Recent Admin Actions
Last 50 entries from audit log
Full Audit Trail
User Action Description Table / Record IP Time
Ajay Louis
demo_ajaylouis_1f039
 USER_LOGOUT User logged out users #16 157.51.221.88 2026-07-21 18:14:12
Ajay Louis
demo_ajaylouis_1f039
 LOGOUT User logged out users #16 157.51.221.88 2026-07-21 18:14:12
Ajay Louis
demo_ajaylouis_1f039
 USER_LOGOUT User logged out users #16 157.51.207.249 2026-07-18 10:41:21
Ajay Louis
demo_ajaylouis_1f039
 LOGOUT User logged out users #16 157.51.207.249 2026-07-18 10:41:21
Arjun Mehta
demo
 CREATED_GROUP Created group: Support chat #6 88.156.176.218 2026-07-14 11:54:47
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-09 00:43:45
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-09 00:43:45
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-08 23:02:02
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-08 23:02:02
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-08 22:37:12
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-08 22:37:12
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-08 22:22:27
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-08 22:22:27
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-08 22:12:28
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-08 22:12:28
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-08 18:23:09
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-08 18:23:09
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-08 17:11:22
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-08 17:11:22
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-07 20:47:01
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-07 20:47:01
Arjun Mehta
demo
 User logged in from Warsaw, Poland using cURL on Unknown OS users #1 88.156.176.218 2026-07-07 20:44:13
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-07-07 20:44:13
Arjun Mehta
demo
 EMAIL_CREATE_TICKET Created ticket #41 (TKT-F1F19E7E) from email thread #1 service_tickets #41 88.156.176.218 2026-07-07 17:04:35
Ajay Louis
demo_ajaylouis_1f039
 USER_LOGOUT User logged out users #16 157.51.208.251 2026-07-06 17:31:41
Ajay Louis
demo_ajaylouis_1f039
 LOGOUT User logged out users #16 157.51.208.251 2026-07-06 17:31:41
Ajay Louis
demo_ajaylouis_1f039
 USER_LOGOUT User logged out users #16 157.51.215.23 2026-07-05 18:47:51
Ajay Louis
demo_ajaylouis_1f039
 LOGOUT User logged out users #16 157.51.215.23 2026-07-05 18:47:51
Arjun Mehta
demo
 User logged in from Warsaw, Poland using Chrome on macOS users #1 88.156.176.218 2026-06-29 15:26:52
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-06-29 15:26:52
Godson Shaju
demo_godsonshaju_2ca2c
 USER_LOGOUT User logged out users #12 88.156.176.218 2026-06-29 15:26:02
Godson Shaju
demo_godsonshaju_2ca2c
 LOGOUT User logged out users #12 88.156.176.218 2026-06-29 15:26:02
Arjun Mehta
demo
 User logged in from Warsaw, Poland using Chrome on macOS users #1 88.156.176.218 2026-06-29 14:48:49
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-06-29 14:48:49
Godson Shaju
demo_godsonshaju_2ca2c
 USER_LOGOUT User logged out users #12 88.156.176.218 2026-06-29 14:48:10
Godson Shaju
demo_godsonshaju_2ca2c
 LOGOUT User logged out users #12 88.156.176.218 2026-06-29 14:48:10
Arjun Mehta
demo
 User logged in from Manchester, United Kingdom using cURL on Unknown OS users #1 72.62.133.9 2026-06-29 14:46:06
Arjun Mehta
demo
 User logged in successfully from IP: 72.62.133.9 users #1 72.62.133.9 2026-06-29 14:46:06
Arjun Mehta
demo
 User logged in from Warsaw, Poland using Chrome on macOS users #1 88.156.176.218 2026-06-29 14:32:20
Arjun Mehta
demo
 User logged in successfully from IP: 88.156.176.218 users #1 88.156.176.218 2026-06-29 14:32:20
Arjun Mehta
demo
 User logged in from Manchester, United Kingdom using cURL on Unknown OS users #1 72.62.133.9 2026-06-29 14:31:47
Arjun Mehta
demo
 User logged in successfully from IP: 72.62.133.9 users #1 72.62.133.9 2026-06-29 14:31:47
Arjun Mehta
demo
 User logged in from Manchester, United Kingdom using cURL on Unknown OS users #1 72.62.133.9 2026-06-29 14:31:35
Arjun Mehta
demo
 User logged in successfully from IP: 72.62.133.9 users #1 72.62.133.9 2026-06-29 14:31:35
Showing last 50 records · View full log →
Login Activity (14 Days)
Successful vs failed login attempts per day

No login data yet

Chart will populate as users log in

Off-Hours Login Flags
Successful logins before 7 AM, after 10 PM, or on weekends — last 7 days

No off-hours logins detected

All logins in the past 7 days occurred during normal business hours

Inactive Account Detector
Active accounts with no login in 30+ days — potential attack surface
15 inactive
Employee Department Last Login Days Inactive Risk
Demo User
demo@graphoid.cloud
 Admin Never logged in — days High
Priya Suresh
priya@sampleco.in
 Admin Never logged in — days High
Vijay Kumar
vijay@testmedical.in
 Admin Never logged in — days High
Anita Rao
anita@medcare-equip.in
 Service Never logged in — days High
Suresh Babu
suresh@medcare-equip.in
 Service Never logged in — days High
Meera Iyer
meera@medcare-equip.in
 Admin Never logged in — days High
Deepak Joshi
deepak@medcare-equip.in
 Service Never logged in — days High
Arun Menon
arun@medcare-equip.in
 Service Never logged in — days High
Priya Nair
priya@medcare-equip.in
 Service Never logged in — days High
Test Prospect
prospect@testcompany.in
 Admin 2026-06-29 14:44:42 47 days Low
Godson Shaju
godsonchittilapilly2@gmail.com
 Admin 2026-06-29 14:53:19 47 days Low
Ananya Krishnan
ananya@newmedical.in
 Admin 2026-06-29 14:51:06 47 days Low
Rahul Sharma
rahul@medcare-equip.in
 Service 2026-07-08 18:12:07 38 days Low
Kiran Patil
kiran@medcare-equip.in
 Sales 2026-07-09 00:42:53 37 days Low
Sonia Thomas
sonia@medcare-equip.in
 Sales 2026-07-09 00:42:01 37 days Low
Consider deactivating accounts inactive for 90+ days
Security Configuration Check
9 of 9 checks passing — PHP & server security settings
All passing
X-Frame-Options
Prevents clickjacking attacks
Pass
X-Content-Type-Options
Prevents MIME-type sniffing attacks
Pass
X-XSS-Protection
Legacy XSS filter for older browsers
Pass
session.cookie_httponly
Blocks JS access to session cookie
Pass
session.cookie_secure
Forces session cookie over HTTPS only
Pass
session.use_strict_mode
Prevents session fixation attacks
Pass
session.cookie_samesite
Mitigates CSRF via cookie isolation
Pass
display_errors
Error details hidden from users (logged instead)
Pass
expose_php
PHP version hidden from response headers
Pass
Security Recommendations
Prioritised actions to improve your score
Remove 1 critical exposed file(s)
Files like .env, .sql dumps, or .git are publicly accessible and may expose credentials or source code. Delete immediately.
-25 pts
15 inactive account(s) — no login in 30+ days
Unused accounts are potential entry points. Review and disable accounts no longer in use.
-5 pts
SSL Certificate
HTTPS certificate health for this domain
Domain
demo.graphoid.cloud
Days Remaining
90 days
Expires On
13 Nov 2026
Issuer
Let's Encrypt
Critical File Exposure Scan
.env files, database dumps, .git exposure, backup archives
1 CRITICAL
database.sql Database dump
CRITICAL
Action required: Please contact support@graphoid.cloud immediately — our team will remove these files from your workspace.
IP Blocklist
Block IPs from accessing this workspace
No IPs currently blocked. Use the form above to block suspicious IPs from the Failed Login section.
Note: Blocked IPs are stored in the database. To enforce them at the login level, add an IP check to login.php that queries this table. A server-level block via .htaccess is more effective for determined attackers.
Enrolled Devices
All devices that have logged into this workspace. Block any unauthorised device to prevent access.
—
Total Devices
—
Users Tracked
—
New (7 days)
—
Blocked
User Device ID OS / Browser IP Address Location First Seen Last Login Logins Status Action
Loading devices...
Security Alert Emails
Test that security notifications are working

Security alerts are sent to the admin email configured in Company Settings when security events occur. Use the button to verify your email configuration is working correctly.

Account locked after failed attempts login.php
Admin login from new IP address auth_log monitoring
Exposed file detected on security scan security.php
SSL certificate expiring within 14 days security.php
Alert will be sent to: info@medcare-equip.in
Geo-Based Login Restrictions
Restrict logins to specific countries. When the allowlist is empty, all countries are allowed. Add a user bypass for travellers or remote workers.
Allowed Countries
If empty = all countries allowed
Note: Geo detection uses IP address. VPN users may appear from a different country — add a per-user bypass for them.
Per-User Bypasses