Read Citadel insights and attack timeline

Follow an incident

Open a domain's Insights page to see charts and the attack/event timeline. Attack started and ended events include duration where available. Recent challenge and block reasons explain how Citadel handled a spike.

Use the Security shortcut to adjust a challenge level or allowlist. Compare the timeline with Domain logs for request-level context and Analytics for fleet trends.