NW

Evidence workspace

TLS Investigator

Pivot through retained TLS service changes without adding probes or retaining certificate identities.

Privacy boundary: this view reads normalized TLS metadata already retained by NetWatch. It does not request certificate bodies, subject/issuer strings, packet payloads, or new network handshakes.

Back to dashboard
Retained observations—
Services in scope—
Changes in scope—
Recommended alerts—

Investigator pivots

Scope retained evidence

Hard API bounds stay ≤ 1,000 rows
Enter an API key, then load retained TLS evidence.

Facets

Change distribution

No evidence loaded

Timeline

Observed TLS changes by day

Change count + alert-recommended subset
No timeline evidence loaded.

Evidence

Change ledger

0 rows
No TLS change evidence loaded.