Dashboard
Your NullPort account at a glance
🏢 Organization Quotas & Policies
Enterprise Pro Enterprise Custom Tier (Usage & Session Metered)Package ceilings provisioned by NullPort Control Centre (NCC). Org admins can allocate quotas to departmental teams and users within these limits.
Session lifetimes, data retention rules, relay network enforcement, and baseline quotas.
My Access & Quota
Your effective role, feature permissions, and remaining daily allowance -- visible to every role, including plain organization members.
My Session Runs & Usage Ledger
Track verified session start time, ended time, precise duration, and session types across your connections.
| Session Started | Session Ended | Session Type | Device / Resource | Duration | Role / Partner | Data Transferred | Status |
|---|---|---|---|---|---|---|---|
| No connection runs recorded yet. | |||||||
Organization Profile
Members & Admins
| Username | Role | Status | Team | Actions |
|---|
Pending Invitations
| Role | Expires | Actions |
|---|
SAML 2.0 Single Sign-On (SSO)
Enterprise SAML 2.0 Service Provider endpoints and Identity Provider integration.
Custom Organization Roles
Organization-defined granular roles layered on top of built-in roles.
| Role Name | Base Role | Description | Granted Permissions | Actions |
|---|
Attribute-Based Access Policies (ABAC)
Fine-grained hardware resource access control based on resource type, vendor, model, and classification attributes.
| Priority | Policy Name | Effect | Conditions | Status | Actions |
|---|
Domain Verification & Account Claiming
Verify corporate domain ownership via DNS TXT record to enable automatic account claiming for enterprise users.
| Domain | Status | DNS TXT Challenge | Auto-Join | Actions |
|---|
Audited Expiring Break-Glass Access
Time-boxed emergency administrator elevation with strict justification requirements and immutable SIEM audit logging.
| Target User | Role Granted | Status | Expires At | Reason | Actions |
|---|
Customer-Managed Encryption Keys (CMEK)
Envelope encryption architecture with customer-managed keys (Local KMS, AWS KMS, HashiCorp Vault, Google Cloud KMS).
Departmental Teams & Quotas
Organize members into functional teams with daily session limits, timezone schedules, and baseline permissions. Expand a team inline to manage members directly without nested popups.
| Name / Region | Timezone | Members | Daily Sessions | Daily HW | Baseline Permissions | Actions |
|---|
Per-User Quota Assignments & Utilization
Individual device limits and live utilization across organization members. Setting a service's quota to 0 disables that capability for the member. Quota allocations are enforced within NCC-provisioned package ceilings.
| Member | Assigned Team | 🔌 Hardware | 🔒 VPN Mesh | 🖥️ Screen Streams | 📁 File Shares | 📞 Audio & Video | Utilization | Actions |
|---|
Organization Session Usage & Run Ledger
Verifiable session runs across all organization members with exact start time, ended time, precise duration, and session types.
| Session Started | Session Ended | Session Type | Member / Host | Guest / Peer | Device / Resource | Duration | Data Transferred | Status |
|---|---|---|---|---|---|---|---|---|
| Loading organization session ledger... | ||||||||
Sites & Hardware Resources
| Name | Type | Site | Health | Passport & Profile | Actions |
|---|
VPN Routing & Firewall Policies
Organization-wide VPN tunnel rules, evaluated highest-priority (lowest number) first. Resource/user/team-scoped overrides can be layered on top via the API.
| Name | Scope | Action | Priority | Direction / Protocol | Source → Destination | Ports | Status | Actions |
|---|
Test a Packet Against Effective Policy
Dry-run evaluation using the same merged, prioritized rule set the VPN tunnel enforces.
Engineering Jobs
Atomic engineering job workspaces bundling heterogeneous resources (DUT, debug probe, serial console, power, network) under a single named lifecycle.
Configure Engineering Job Workspace
| Job Name & Purpose | Resources | Status | TTL / Window | Created By | Actions |
|---|
Job Workspace Details
Job Notes & Handover
Hardware Workflows & Automation
Declarative hardware workflow definitions, CI resource locks, and bounded test execution.
Validated Templates
Configure Workflow Run
| Run & Correlation | Workflow Template | Status | Timeline / Elapsed | Triggered By | Actions |
|---|
Workflow Run Progress
Step Progress & Telemetry
| # | Step Name | Action | Target | Attempt | Status | Duration | Details / Error |
|---|
Generated Artifacts & Evidence
Reservations
Active and scheduled resource/bench reservations for your organization.
| Purpose | Resource/Station | Requested By | Status | Scheduled | Actions |
|---|
My Waitlist
Queued requests for resources that were busy at request time. Automatically promoted to a real reservation the moment the resource frees up.
| Purpose | Resource/Station | Duration | Status | Requested | Actions |
|---|
Job Notes
Shared, persistent engineering notes -- debug logs, handovers, calibration observations -- visible to the whole organization, not just a chat room.
Subscription
📊 Enterprise Session Quotas & Dynamic Metered Billing
Real-time session utilization, allocated quota capacity, and dynamically computed consumption billing.
Upgrade enterprise contract
Enterprise plans are contracted and billed monthly based on reserved device/session capacity. Upgrade requests are activated only after NCC Billing review; downgrades require a separate contract review.
Need a downgrade or contract change? Open a Subscription support ticket.
License Pools & Seat Assignment
| Plan | Seats | Status | Expiry | Actions |
|---|
Invoices
| Invoice # | Amount | Status | Billing Period | Issued |
|---|
Renewal History
| Type | Plan Change | Seats | New Expiry | Recorded |
|---|
Contract Amendment Requests
Requests are reviewed and require two independent NullPort billing approvals before they take effect.
| Type | Requested Change | Reason | Status | Requested | Actions |
|---|
Reports & Exports
Download authorized datasets for your account or organization.
Support Tickets
| Subject | Category | Severity | Status | Created | Actions |
|---|
My Profile
Keep your contact and workspace details up to date. These fields are optional and never affect sign-in.
Change Password
Requires your current password. All other active sessions are signed out automatically.
Security & Sessions
Devices and browsers currently signed in to your account.
| Device | IP address | Started | Last active | |
|---|---|---|---|---|
| Loading sessions… | ||||
OT-Safe Action Profiles & Capability Catalogue
Versioned, guardrailed operational technology profiles bound to organization, certified profile, or hardware resources. Fail-closed execution with strict parameter canonicalization.
| Profile Code | Name | Scope Type | Destructive | Min Quorum | Version | Max TTL | Actions Permitted |
|---|
Active Capability Grants
Cryptographically signed capability grants (signed JWT tokens). Immediately revoked on demand without destroying field hardware.
| Grant Token JTI | Grantee | Resource / Scope | Capabilities | Issued At | Expires At | Status | Actions |
|---|
JIT Access Requests & Dual-Control Quorum
Just-In-Time access approval ledger. Destructive operations require dual control quorum (>= 2). Single-veto denial supported.
| Request ID | Requester | Resource | Purpose / Ticket | Destructive | Approvals / Quorum | Status | Actions |
|---|
Firmware Trust Vault & Release Catalogue
Cryptographically signed firmware releases, SLSA build provenance, SBOM verification, and anti-rollback policies. Enforces strict separation of duties.
| Name & Version | Arch | Epoch | SHA-256 | Signer | SBOM Status | SLSA | Approval Status | Actions |
|---|
Immutable Flash Ledger
Tamper-evident, cryptographically chained execution records. Backlinked SHA-256 blocks guarantee monotonic audit trail of all target flashing.
| Seq | Timestamp | Firmware | Target Resource | Operator | Recovery? | Override? | Status | Ledger Hash |
|---|