Logs, Watermarking, and Telemetry

The Logs module is the central record of everything happening in BeyondGuard. Every query, response, security evaluation, and system interaction — across the AI Proxy and Beyond Chat — is logged in detail and made queryable.

​

Log records

Apply advanced filtering by date range, endpoint, organization, username, or query text. Each record includes the query time, user information, endpoint name, processing duration, and security status (SAFE / UNSAFE).

​

Watermarking and traceability

The logging infrastructure uses watermarking on every query for full traceability. Open a query’s details to copy the Response Body in JSON format and examine exactly why specific security headers were triggered. In detailed analysis, a log shows precisely:

• Which security policy was triggered,
• How threshold values were evaluated, and
• Which vulnerability a justified UNSAFE decision is based on.

A Log ID on each record (and on error responses) lets support teams match a user complaint to the exact log entry within seconds.

​

Performance and cost metrics

Each log carries operational metrics:

• Timing Details — the processing time spent on each security control, useful for performance optimization.
• Token Details — for queries processed through an LLM, the model used, the number of input/output tokens, and the approximate cost.

Together these make the Logs module a comprehensive auditing screen — detailed enough for security teams and complete enough for administrators to monitor system behavior end to end.

​

SIEM and observability integrations

The Integration Settings module streams security alerts, error logs, and compliance records from the AI Proxy into your existing SIEM, observability, and notification infrastructure. Supported targets include: Through these integrations, every event can be monitored in real time, reported in line with SOC processes, and automated to speed up incident response — delivering the visibility and traceability enterprise audits require.

​

Related