The operational task
A donor portal needs secure application code, identity controls, and a maintenance owner even with a limited monitoring budget.
What the implementation supports
Core 1-SEC detection can process local telemetry without a cloud dashboard. Optional external analysis, notifications, and sharing have separate configuration and destinations.
Integration and limits
Local operation is not a promise of total privacy or universal protection. Review enabled integrations, event fields, retention, and actual outbound traffic.
Check collector wiring, the current event schema, and the enforcing component before relying on a response. Preserve the original event and verify the result on your actual deployment. An emitted alert does not prove that the initiating operation was stopped.