A reference for the terms and the standard KPI widgets you will meet in Interno, the Zeron Command Center.
| Term | What it means |
|---|---|
| Dashboard | A saved arrangement of widgets. You can have many; one can be marked as your default so it opens first. |
| Asset Inventory | The consolidated view of assets from your connected sources. It has three tabs: Assets Listing, Asset Coverage Matrix and User Access Coverage. |
| Assets Listing | The table of collected records for one source at a time, with filters, column choices and a CSV export. |
| Source | One collected data set — one ZCN_ table — chosen from the Source: dropdown in Asset Inventory or the Source dropdown in Manual Ingestion. |
| Asset Coverage Matrix | A grid showing which of your connected tools has seen each asset — so you can spot assets only one tool knows about. A dropdown switches between Asset Coverage Matrix by Host, by IP and by Domain. |
| User Access Coverage | A grid of users against connected sources, plus a per-user access graph. |
| Integration | A configured connection to an external tool (an EDR, cloud provider, ITSM system and so on) that pulls its data into Interno on a schedule or on demand. |
| Connector | A tool in the Integrations catalogue. A connector does nothing until you save a credential for it. |
| Credential | One saved set of sign-in details for a connector, with a permanent name. A connector can have several. |
| Scan | One collection run for one credential. Its status is Processing, Completed or Failed. The first scan starts when the credential is saved; later ones run on a schedule or when you click Start Scan. |
| Deactivated | A credential that is kept, with its history, but left out of automatic scanning. |
| Manual Ingestion | Uploading data by file when no connector covers it. Excel .xlsx workbooks only, built from a downloaded template and loaded only after a reviewer approves them. |
| Query Library | Where saved items live, under three tabs: Widget, Evidence and Alert. |
| Evidence Query | A saved query whose result is used as compliance evidence, shared with Conformity. |
| Widget | One visualisation — a chart, a table, a KPI card or a standard KPI panel — driven by a query. |
| Risk Register | Where risks are tracked through the four-step workflow: Risk Initiation, Risk Scoring & Prioritization, Risk Management, Risk Closure. |
| Treatment Status | Where a risk stands: Pending, Planning, In Progress, On Hold, Waived or Completed. |
| Risk Exposure | The figure worked out on the scoring step from Risk Likelihood and Risk Impact. Residual Risk Exposure is the same figure after treatment. |
| ZIN Advisor | Interno's AI assistant chat, reached from the sidebar. Present on Zeron-hosted (SaaS) environments only. |
| ZIN Dashboard | A dashboard generated by AI from a prompt you type, rather than assembled by hand. |
| Term | What it means |
|---|---|
| ZCN_ table | Interno normalises every connector's records into shared tables named ZCN_<TYPE> — for example ZCN_DEVICES, ZCN_USERS, ZCN_VULNERABILITIES. |
ZCN_SOURCE | Which tool a record came from. Group or filter by this to compare tools. |
ZCN_IS_LATEST | Marks the newest snapshot of a record. Filter to 1 so you count current state instead of history. |
ZCN_COLLECTED_AT | When the record was collected. Use it for trends over time. |
ZCN_CREDENTIAL_ID | Which integration credential collected the record. Manual uploads carry manual. |
| Custom column | A column whose name ends in a double underscore, added through a Manual Ingestion workbook. |
| Data Dictionary | The searchable drawer in the widget builder that lists every available field with a plain-language label, and inserts it into your query. |
| Term | What it means |
|---|---|
| Scope | A single permission string, such as defence:dashboard:view. Missing the scope a page needs gives you an Unauthorized screen. |
| Policy | A bundle of scopes. |
| Group | A bundle of policies. Adding users to groups is the recommended way to manage access. |
Interno ships with fourteen standard KPI widgets you can place on a dashboard. Unlike a chart you build yourself, each one is a purpose-built panel.
| KPI widget | What it covers |
|---|---|
| Compliance Score | Regulatory compliance and audit readiness |
| Breach Probability | Breach risk and threat exposure |
| Z-Score Analysis | Statistical anomalies and deviations from the norm |
| Patches Heap | Patch management and outstanding updates |
| Mitigation Efficiency | Effectiveness of your security controls |
| Risk Posture Trend | How risk evolves over time |
| Upcoming Audit | Audit schedules and compliance deadlines |
| Budget Analysis | Security budget and financial insight |
| Security Program Maturity | Maturity of your security programme |
| Risk Tolerance & Risk Appetite | Risk thresholds and appetite |
| Privileged Access Anomalies | Suspicious privileged-access patterns |
| MFA Coverage Gaps | Accounts and systems missing multi-factor authentication |
| Data Exfiltration | Unauthorised data-transfer activity |
| Unmanaged Asset Growth | Growth of shadow or unmanaged assets |
Alongside these there are three coverage-matrix panels — Asset Coverage Matrix by Host, by IP and by Domain — which show which of your sources has seen each host, address or domain. They are what the Asset Coverage Matrix tab renders.
A KPI widget shows nothing → Standard widgets depend on the underlying ZCN_ tables being populated. Connect the integration that supplies that data type and let it finish a scan.
My counts look too high → You are probably counting historical snapshots. Add ZCN_IS_LATEST = 1 to the query.
A term used in my dashboard is not in this list → Widget titles are set by whoever created the widget, so custom widgets can carry any name. Open the widget's query to see exactly what it measures.
Need more help? Contact support@zeron.one