Skip to content
Track a ticket Sign in Client portal


CrimeFire Network Operations Center

Command of client operations, infrastructure, and public trust.

opsgrid is the enterprise desk for CrimeFire NOC: tasks, tickets, diagnostics, domains, and embeddable Trust Verified seals — isolated by tenant, authorized by policy, and executed on the queue.

Open the client portal Staff sign in
  • Tenant-isolated workspaces
  • No central SSH keys
  • White-label ready
opsgrid · operating surfaces
  • Console /app
  • Client zone /portal
  • Case tracker /track
  • Trust Verified /l/ogl_…

Live on this workspace

  • 2Published Trust Verified seals
  • 4Web Checks completed in 30 days

Scores refresh every five minutes. Published badges poll live JSON every 30 seconds.

Policy authorizationAccess decided by policies, never role strings.
Encrypted credentialsTenant secrets encrypted, masked to the last four.
Queued diagnosticsProbes run on the queue, never inside a request.
Tenant isolationEvery client-scoped table carries a tenant scope.

Platform

One operating picture for delivery, uptime, and client work.

Purpose-built for a network operations center: multi-tenant, policy-gated, and safe to publish on a customer site.

Command center

Tasks, projects, and alerts on one board. Staff remain in the console; clients remain in their portal.

Diagnostics

HTTP, TLS, DNS, mail, and site probes are scheduled work. Results feed scores, alerts, and labels.

Client zone

Tickets, invoices, and plan-gated tools. A public reference plus the requester email is enough to track a case.

Domains & Cloudflare

Registrar wallets, zone sync, and certificate reads through stored credentials — never through environment files.

NOC displays

Lobby and operations screens use scoped display tokens. Last-known-good remains on the device if the network drops.

White-label tenants

Brand, users, and data stay inside the tenant. A custom domain or header selects the workspace.

Web Check

Public posture, scored on the queue.

Pick a pack or run the full probe. Each finding carries a plain-language fix, and the result feeds the host's score and its Trust Verified seal.

  • Scheduled uptime, TLS expiry, DNS, and mail authentication
  • Threat-intel lookups only where the workspace holds a key
  • Server packs read the push agent — the desk holds no SSH keys
Web Check · packs
  • Full auto Run the full public probe: HTTP, TLS, DNS, mail, and intel when keys exist.
  • Security audit HTTP, TLS, headers, blacklist, and threat intel when credentials exist.
  • DNS Zone records, dig, DNSSEC, and resolver propagation.
  • SSL Certificate expiry plus the HTTPS redirect chain.
  • MX / mail MX records, SPF / DMARC, optional DKIM, and optional SMTP reachability (port 25 is often blocked).
  • Server Last agent CPU, RAM, and disk snapshot. Metrics stay push.

Client modules

Paid desks, billed per completed job.

Clients run document, lookup, and capture desks from the portal. Each job draws a fixed unit from the workspace wallet; failed jobs are not charged.

  • 23 desks, each priced per unit in rupees
  • Results download from the desk and stay inside the tenant
  • Staff grant or invoice add-ons from the plugin desk
Portal · modules
  • Statements ₹2.00
  • Documents ₹1.00
  • Capture ₹1.00
  • Clips ₹5.00
  • Places ₹0.50
  • Text ₹1.00
  • Pictures ₹0.50
  • Sheets ₹0.50

+ 15 more desks in the portal

How it works

Observe. Decide. Disclose.

The same record that operators use internally is what a client can embed or look up — without exposing the rest of the estate.

  1. 1

    Observe

    Monitors and toolkit scans collect posture. Open alerts and domain expiry sit on the same host record.

  2. 2

    Decide

    Scores grade A–F on a five-minute refresh. Staff rescore from the desk; stale embeds queue themselves.

  3. 3

    Disclose

    A security or reputation badge publishes to the client site. The case tracker answers with status only.

Security & governance

Controls built into the platform, not bolted on.

Every boundary below is enforced in code — tenancy, authorization, credential storage, and device access.

Policy-only authorization

Staff and portal actions resolve through policies. Destructive cloud actions need an admin and a typed confirmation.

Encrypted integration secrets

Cloudflare, cloud, and mail tokens are stored with AES-256 encryption per client and shown masked to the last four characters.

Tenant-scoped data

Client tables carry a tenant and a global scope, so a query cannot read across workspaces by accident.

Push agents, no SSH

Monitored hosts phone home with an opaque agent token. The NOC never keeps central SSH keys.

Scoped display tokens

Kiosk and lobby screens use their own read-only tokens — never a staff session.

Minimal public disclosure

Embeds and the case tracker return host, grade, and status. Scan reports and wallet balances stay private.



Trusted labels

Trust Verified: a live score, issued by the NOC.

Only opted-in, approved labels appear here. The homepage shows host, grade, and a verify link — never scan internals, credits, or tenant identifiers.

  • Security Score — HTTP, TLS, headers, DNS, incidents
  • Web Reputation — availability, blacklist, registration, monitor trend
  • OEM /l/oem/{workspace}/embed.js · token prefix ogl_
Verified Business

Issued after staff review. The public token is unique and prefix-locked to ogl_.

Data Protection

Tenant secrets stay encrypted. Public embeds never include scan reports or wallet balances.

Spam-Free

Mail and reputation certificates are extra toolkit packs, each scored on the queue and withdrawn when a later check fails.

Live seals

2 published

Security score · vgas-production-ownlxk.laravel.cloud

Grade A · 100/100 Verify this label

Certificate marks

Extra packs, each scored on the queue
Spam Free

Not listed on the public mail blocklists OpsGrid watches.

Reputation Score

Live security score at or above the certification threshold.

Malware Safe

Safe Browsing reports no malware on the hostname.

Ecommerce Safe

HTTPS, TLS, HSTS, malware, and shopper policy pages all pass.

Authenticated Sender

SPF, DKIM, and DMARC are published, so the mail is hard to spoof.

DNSSEC

DNS answers for the zone are signed.

Live Website

The public site answers a healthy probe under OpsGrid watch.



Engagements

Engagements are scoped per client.

Plans, ticket quotas, and tools are set on each client workspace. Open the portal on your workspace address to see yours, or raise a ticket to talk to us.

Open the client portal Track a ticket

FAQ

Questions clients and operators ask.

Still unsure? Raise a ticket from the portal and track it by reference.

How does a client track a ticket without an account?

Use the case tracker with the public reference and the requester email. It answers with status only — no internal notes.

Does OpsGrid hold SSH keys to my servers?

No. Hosts run a small push agent that reports CPU, RAM, and disk with its own token. Public URL checks run from the NOC queue.

Where are third-party credentials stored?

Per client, in encrypted storage. They are never written to environment files or logs, and screens show only the last four characters.

What does a Trust Verified seal publish?

The host, its grade, and a verify link. Only labels a host has opted in and staff have approved appear publicly.

How do clients add plugins and modules?

Sign in to the portal, open Plugins, then buy or request an invoice. After activation, open the matching desk from My plugins.

What is the difference between Billing and the Invoice desk?

Billing is your OpsGrid bill. The Invoice desk is an add-on for invoices you issue to your own customers.

The desk is ready.

Staff enter the console. Clients use the portal. Anyone with a public reference can track a ticket without signing in.

Track a ticket Sign in