Sample dashboard, demo data.

This is an illustrative preview of the private dashboard we provision for a customer. It is not a live login and not a real customer's telemetry. Every name, event and timestamp below is fictional.

Customer dashboard · sample

Northwind Notes (sample)

What a real client sees after we provision their private, token-gated dashboard: license integrity, crack canaries and piracy telemetry from their protected build, streaming in as events fire.

Sample · demo data Streaming · last 30 h

Application

Northwind NotesmacOS · sample vendor

Protection

ProtectedHardened build 3.2.1

Last seen

2 min agoTelemetry streaming

Events · 30 h

96 license integrity · 3 canary / piracy

Blocked

5/ 51 signed grant verified

Piracy signals

31 canary · 1 clone · 1 debugger

Event volume

  • License integrity
  • Canary / piracy

Events per 3-hour window across the sample period.

Events per 3-hour window, sample data Stacked bars: yesterday 09:00 one license event; 18:00 one canary event; 21:00 one license event; today 09:00 one license event; 12:00 three license and one canary event; 15:00 one canary event. 0 1 2 3 4 06:00 1 license integrity 09:00 12:00 15:00 1 canary / piracy 18:00 1 license integrity 21:00 00:00 03:00 06:00 1 license integrity 09:00 3 license integrity 1 canary / piracy 12:00 1 canary / piracy 15:00 Yesterday Today

Outcomes

9 events

How each event in the window was handled.

Outcomes: 5 blocked, 3 piracy signals, 1 verified, out of 9 events 9 events
Outcome breakdown
OutcomeEventsShare
Blocked556%
Piracy signals333%
Verified111%

Events

Newest first. Open a threat event to see its Evidence panel: source IP, device, OS account name and recurrence, with a copyable summary for counsel.

TimeTypeWhat happenedOutcome
15:03:41Canary
Crack canary touched

A canary that only fires in a patched binary reported in. Signals a modified copy running outside your distribution.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
203.0.113.42
User-Agent
NorthwindNotes/4.2.0 CFNetwork/1568.200.51 Darwin/24.1.0
Received
today 15:03:41 UTC

Recurrence · this dashboard

This IP
3 events · first today 11:47:55 UTC · last today 15:03:41 UTC
This device
4 events · first yesterday 19:52 UTC · last today 15:03:41 UTC

Reported by your protected build

Device fingerprint
fp1:4be19c07d2a85f3e61b0c94d7a2e5f18c3d6b90a
Model
MacBookPro18,3
Manufacturer
Apple
OS
macOS 15.1
Architecture
arm64
Hostname
kestrel-mbp.local
Timezone
Europe/Berlin
Locale
de_DE
OS account name
kestrel
App
com.northwind.notes 4.2.0
Bundle id check
Not reported
Signing team check
Not reported
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Canary
14:58:02License
Preference flag flip refused

A write set isPro = true in app preferences. Unlock was not granted. Pro state is not trusted from editable prefs.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
203.0.113.42
User-Agent
NorthwindNotes/4.2.0 CFNetwork/1568.200.51 Darwin/24.1.0
Received
today 14:58:02 UTC

Recurrence · this dashboard

This IP
3 events · first today 11:47:55 UTC · last today 15:03:41 UTC
This device
4 events · first yesterday 19:52 UTC · last today 15:03:41 UTC

Reported by your protected build

Device fingerprint
fp1:4be19c07d2a85f3e61b0c94d7a2e5f18c3d6b90a
Model
MacBookPro18,3
Manufacturer
Apple
OS
macOS 15.1
Architecture
arm64
Hostname
kestrel-mbp.local
Timezone
Europe/Berlin
Locale
de_DE
OS account name
kestrel
App
com.northwind.notes 4.2.0
Bundle id check
Not reported
Signing team check
Not reported
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Blocked
14:41:37License
Unsigned license cache rejected

A dropped-in cache carried an activated field with no valid signature. Rejected before it could unlock features.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
198.51.100.9
User-Agent
NorthwindNotes/4.0.3 CFNetwork/1496.0.7 Darwin/23.5.0
Received
today 14:41:37 UTC

Recurrence · this dashboard

This IP
1 event · first and last today 14:41:37 UTC
This device
Not reported

Reported by your protected build

Device fingerprint
Not reported
Model
Not reported
Manufacturer
Not reported
OS
Not reported
Architecture
Not reported
Hostname
Not reported
Timezone
Not reported
Locale
Not reported
OS account name
Not reported
App
com.northwind.notes 4.2.0
Bundle id check
Not reported
Signing team check
Not reported
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Blocked
13:12:09License
Forged Keychain-shaped item rejected

An item mimicking the license entry failed grant verification. A Keychain value on its own is not accepted as proof of purchase.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
198.51.100.77
User-Agent
NorthwindNotes/4.2.0 CFNetwork/1568.200.51 Darwin/24.1.0
Received
today 13:12:09 UTC

Recurrence · this dashboard

This IP
1 event · first and last today 13:12:09 UTC
This device
1 event · first and last today 13:12:09 UTC

Reported by your protected build

Device fingerprint
fp1:0d8f6b4a2c1e3957b8a6c4e2f0d1b3a5c7e9f8d6
Model
MacBookAir10,1
Manufacturer
Apple
OS
macOS 15.0.1
Architecture
arm64
Hostname
studio-air.local
Timezone
Europe/London
Locale
en_GB
OS account name
guest
App
com.northwind.notes 4.2.0
Bundle id check
Not reported
Signing team check
Not reported
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Blocked
12:26:18Piracy
Clone detected

A build reported a bundle identifier and signing identity that don't match your release. Likely a rebadged or cloned copy.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
198.51.100.23
User-Agent
NorthwlndNotes/4.2.0 CFNetwork/1568.100.1 Darwin/23.6.0
Received
today 12:26:18 UTC

Recurrence · this dashboard

This IP
1 event · first and last today 12:26:18 UTC
This device
1 event · first and last today 12:26:18 UTC

Reported by your protected build

Device fingerprint
fp1:91c3e5a7b0d24f68e1a9c3b5d7f02468ace13579
Model
Macmini9,1
Manufacturer
Apple
OS
macOS 14.6.1
Architecture
arm64
Hostname
buildbox-07.local
Timezone
America/Sao_Paulo
Locale
pt_BR
OS account name
admin
App
com.northwind.notes 4.2.0
Bundle id check
MISMATCH (expected com.northwind.notes, running as com.n0rthw1nd.notes)
Signing team check
MISMATCH (expected NWND123456, signed by QX9TEAM000)
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Clone
11:47:55License
Edited prefs file reverted

A hand-edited com.northwind.notes.plist tried to assert a Pro tier. The integrity check caught the mismatch and held the app at its real tier.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
203.0.113.42
User-Agent
NorthwindNotes/4.2.0 CFNetwork/1568.200.51 Darwin/24.1.0
Received
today 11:47:55 UTC

Recurrence · this dashboard

This IP
3 events · first today 11:47:55 UTC · last today 15:03:41 UTC
This device
4 events · first yesterday 19:52 UTC · last today 15:03:41 UTC

Reported by your protected build

Device fingerprint
fp1:4be19c07d2a85f3e61b0c94d7a2e5f18c3d6b90a
Model
MacBookPro18,3
Manufacturer
Apple
OS
macOS 15.1
Architecture
arm64
Hostname
kestrel-mbp.local
Timezone
Europe/Berlin
Locale
de_DE
OS account name
kestrel
App
com.northwind.notes 4.2.0
Bundle id check
Not reported
Signing team check
Not reported
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Blocked
Yesterday 22:30License
Replayed license response refused

A previously captured success:true response was replayed to the app. The lease was out of its signed window, so it was not honored.

Blocked
Yesterday 19:52Runtime
Debugger attach observed

Runtime protection saw a debugger attach during a license check and reported the attempt. Common first step before a patch.

EvidenceSighting, not identityFictional sample values

What Fortifie’s server and your protected build observed. Not a verified identity: an IP can be a VPN, carrier or shared network, and the OS account name is the login on that Mac, not a legal name.

Seen by Fortifie’s server

Source IP
198.51.100.140
User-Agent
NorthwindNotes/4.2.0 CFNetwork/1568.200.51 Darwin/24.1.0
Received
yesterday 19:52:07 UTC

Recurrence · this dashboard

This IP
1 event · first and last yesterday 19:52:07 UTC
This device
4 events · first yesterday 19:52 UTC · last today 15:03:41 UTC

Reported by your protected build

Device fingerprint
fp1:4be19c07d2a85f3e61b0c94d7a2e5f18c3d6b90a
Model
MacBookPro18,3
Manufacturer
Apple
OS
macOS 15.1
Architecture
arm64
Hostname
kestrel-mbp.local
Timezone
Europe/Berlin
Locale
de_DE
OS account name
kestrel
App
com.northwind.notes 4.2.0
Bundle id check
Not reported
Signing team check
Not reported
Copy a counsel-ready summary. Fortifie does not contact the IP, ISP or anyone else.
Runtime
Yesterday 09:14License
Signed license grant accepted

A valid, signed lease verified for a paying seat. Pro unlocked normally. This is the one path that works.

Verified

Showing 9 of 9 sample events · all names, events and timestamps are fictional.

How the real thing is set up

The live dashboard is provisioned privately, per customer, and gated by a token we issue. There is no public signup and no password form here. We stand it up for you as part of an engagement, wired to your own protected build so these events are your app's, not a sample like this one.

License integrity, crack canaries and piracy telemetry all feed the same view, alongside runtime threat events and adaptive alerts. Where the evidence supports it, assessment and threat data recommend stronger protect settings on your next signed release. See what the hardening agent did to the build.