Answers to the questions we hear most often about Interno, the Zeron Command Center. Interno pulls data from your existing security and IT tools into one place, normalises it, and lets you build dashboards, queries, alerts and a risk register on top of it.
What is Interno? Interno is the Zeron Command Center. It brings the data from your connected security tools into a common set of tables, then gives you dashboards, an asset inventory, a query and widget library, and a risk register built on that data.
How is Interno laid out? The left sidebar has these entries:
| Sidebar entry | What is under it |
|---|---|
| ZIN Advisor | The AI assistant chat. Shown on Zeron-hosted (SaaS) environments only. |
| Dashboard | Your dashboards and their widgets. |
| Assets | Asset Inventory, Manual Ingestion, Query Library. |
| Risk Register | Risks and the risk workflow. |
| Reports | Reporting. |
| Admin | Integrations, Management, Settings. |
Do I need a special role? Interno does not use named job-title roles. Access is granted with permission scopes that begin with defence: (for example defence:dashboard:view). Your administrator groups those scopes into policies and groups. See Interno: Roles & Permissions Reference.
Which tools can I connect? Go to Admin > Integrations and use the Category dropdown to browse the catalogue. Categories include EDR, XDR, SIEM, SOAR, CSPM, VMDR, WAF, PAM, IDAM, DLP, NAC, ITSM and more. Each connector's setup form is defined by the connector itself, so the fields you are asked for differ from tool to tool. The full list, with the fields each one asks for, is in How to Configure Connectors/Integrations.
Why do I see fewer tools than that list? You see the tools Zeron has made available to your organisation. Ask your Zeron representative to add another.
Is ServiceNow supported? Not yet. ServiceNow may appear in the connector list, but data collection for it has not been released, so its scans will not bring in data.
Is there a way to test credentials before saving? No. Credentials are not checked when you save. Saving starts the first scan immediately, and a wrong credential shows up as a Failed scan — hover the Failed chip in Scan Information to read why.
How often is data refreshed? Each active integration is re-scanned automatically on a recurring schedule — every seven days unless Zeron has set a different interval for your deployment — and you can use Start Scan at any time. Automatic scanning stops for an integration after three failed scans in a row, until one succeeds.
Will I be told when a scan finishes? The person who added the integration is emailed when it is added, when a scan starts, and when it completes or fails.
Can I change the credentials of an integration I already added? Yes. Open the integration's card menu and choose Edit. The full credential form reopens with your saved values filled in, and you save with Update. You do not need to delete and recreate the integration.
Why are the password and token fields empty when I edit? Secret fields are never sent back to your browser. On edit they are shown blank and marked (leave blank to keep current). Leave one blank and the stored secret is kept; type a new value and it is replaced.
Why can't I rename an integration? The Name is permanent. It becomes the integration's identifier and is recorded against every scan it produces, so it cannot be changed after creation. On the edit form the Name field is disabled and shows the tooltip "This name can't be changed once the integration is added."
What can I type in the Name when I create an integration? Letters, digits, and the characters . _ - only — no spaces and no other symbols. If you enter something else, saving is blocked with "Name may contain only letters, digits, and . \_ - (no spaces)."
What else can I do to an existing integration? The card menu also offers Start Scan, Deactivate / Activate, Edit and Delete.
What if my data isn't available through a connector? Use Assets > Manual Ingestion to upload it. Download the template for the tool and source, fill it in, and upload it as an .xlsx workbook of up to 10 MB. A reviewer must approve it before it is loaded. See How to Upload Data via Manual Ingestion.
Can I export what Interno has collected? Yes. In Assets > Asset Inventory, pick a source and use Export Data to download a CSV of up to 100,000 rows.
How is the data organised once it arrives? Records from every connector are normalised into shared tables named ZCN_<TYPE> — ZCN_DEVICES, ZCN_USERS, ZCN_VULNERABILITIES, ZCN_INCIDENTS and so on. Many tools can feed the same table. See Interno Data Sources & Fields (Data Dictionary).
How do I create a dashboard? On the Dashboard page use the Create button. It offers Dashboard (build one from template or existing widgets), ZIN Dashboard (generated by AI from a prompt), Widget, Evidence and Alerts.
Can I build my own widgets? Yes. The widget builder has three tabs — Query (point-and-click), SQL (write it yourself) and AI (describe what you want). A Browse data dictionary drawer lets you search every available field and insert it into the query.
Can I filter a whole dashboard at once? Yes. With a dashboard open, use Global Filters in the header. Filters you add there apply to every widget on that dashboard. The button turns green while filters are applied, and hovering it lists them.
Can I move a dashboard between environments? Use Export Dashboard in the dashboard's ⋮ menu to download a .json file, and Import Dashboard to load one back.
What is the Query Library? Assets > Query Library holds your saved items under three tabs: Widget, Evidence and Alert.
How does the Risk Register work? Risks move through a four-step workflow: Risk Initiation, Risk Scoring & Prioritization, Risk Management and Risk Closure. A risk can be closed as Completed only once at least one evidence document is attached. See How to Use the Risk Register.
Does Interno create risks automatically? No. Every risk is raised by a person with Create Risk.
Why do I see an "Unauthorized" screen on a page? Your account is missing the scope that page requires. An administrator can add it under Admin > Management. The Interno: Roles & Permissions Reference lists which scope each area needs.
Who can manage users and groups? Admin > Management is available only to users who hold the zitadel:iam permission. Its tabs cover Users, Groups and Departments, plus activity and authentication logs.
Most sidebar entries do not respond when I click them → Until your organisation has ingested any data, Interno keeps only Integrations, Management, Manual Ingestion and Settings clickable; Dashboard, Asset Inventory, Query Library, Risk Register and Reports stay disabled. Connect an integration or upload a workbook, then reload.
My Excel file is rejected on Manual Ingestion → Only .xlsx workbooks of up to 10 MB are accepted. The upload area lets you pick a .xls file, but it is refused when uploaded. Convert .xls, CSV or other formats to .xlsx first, starting from the downloaded template.
I cannot see the Create button on the Dashboard page → That button appears only if you hold at least one of defence:dashboard:create, defence:widget:create or defence:query:create.
I was logged out with "Session Expired!" → Interno signs you out after 15 minutes without any activity. Sign in again.
Editing an integration says the name cannot be changed → That is expected — the name is fixed at creation. If you truly need a different name, create a new integration and delete the old one.
I do not see ZIN Advisor in the sidebar → ZIN Advisor is shown on Zeron-hosted (SaaS) environments only. It is not present in self-hosted deployments.
Need more help? Contact support@zeron.one