Security Center
Watch your server and intervene when someone tries to break in. Security Center brings together alarms, your network map, lockdown and control-node defense. Sentinel Active Protection adds automatic interception.
Publisher
Bastion Circuit is the fictional publisher of this application. The publisher button in the App Store opens its company website in Interwebs. You can also find the company through Elgoog. Its operations server is part of the game world and runs active defenses. Investigating it can uncover internal correspondence and further leads.
Subscription and download
Security Center initially costs $2,000 in-game money per week, per server. A week lasts seven real days, including time spent logged out. The App Store shows the binding price before you subscribe.
- Choose your server and one of your own bank accounts for automatic payments.
- Subscribe, then download the application. These are separate steps.
- The App Store shows your paid term, payment account, modules and cancellation status.
- Cancellation stops renewal. Your paid week remains available.
- If renewal fails for insufficient funds, there is no partial charge or debt. Protection expires. Reactivation pays for a fresh week without charging missed weeks.
- After a disk reset, downloading again during a paid term is free. Resets and IP changes do not restart your paid term or cooldowns.
Sentinel initially costs an additional $5,000 per week. Both modules share a billing date. Adding Sentinel partway through a week only charges for the remaining time. Price changes do not automatically alter an existing agreed weekly price.
Lockdown
In Files & Software, choose Start antivirus on an antivirus file, then activate lockdown in Security Center. The antivirus stays running until you stop it. Scan for viruses performs a separate cleanup scan and remains available while the antivirus is running.
Incoming ordinary hacks, exploits and foreign virus installations continue at 20% speed. Your own outgoing attacks, uploads and downloads also slow down. Existing access and infections remain in place.
Protection starts at three minutes. Stronger antivirus versions extend it to up to five minutes. Successfully stopping real advances in the control-node intrusion earns additional protection, up to eight minutes in total. Automatic Sentinel interceptions do not extend lockdown.
The 20-minute cooldown starts when lockdown actually ends, including an early release, stopping the bound antivirus or losing the control node. Lockdown and Sentinel need free CPU and RAM. Check their usage in Task Manager.
Control-node intrusion
Isolation and reinforcement become available during an active intrusion at your control nodes. While no intrusion is active, they remain on standby. Lockdown can be activated independently.
Defenders know their network layout. Attackers must first complete a port scan, then inspect reachable nodes and take over services. Login gateway and SSH lead through Maintenance; FTP leads through File service. Both routes reach the Control node.
- Inspect: Discover a reachable node and its next connections.
- Breach: Take over a service using your running cracker or exploit.
- Decoy: Create an ambiguous alarm to distract the defender.
- Investigate: Identify whether an alarm comes from an intrusion or a decoy.
- Isolate: Temporarily disconnect a service and interrupt advances through it. Your own transfers through that service are also affected.
- Reinforce: Slow opposing intrusion actions at a node. You can reinforce the Control node too.
Each attacker can run one offensive action, and each defended server one defensive action at a time. Isolation and reinforcement cannot be active together. Interrupted steps must be restarted; already captured nodes remain captured.
A stronger cracker or exploit speeds up node breaches; a weaker one takes longer. The normal hack still has its own software requirements.
A compromised Control node interrupts active countermeasures, ends lockdown and existing Sentinel pauses, suppressing protection for two minutes. This does not grant root access: the ordinary hack must still succeed. An intrusion lasts at most ten minutes.
Emergency shutdown
Hardware offers emergency shutdown even without a subscription. You can use it once every 24 hours. It disconnects sessions, cancels running actions and forces a five-minute reboot. Mail, settings and support remain accessible.
Your external vSpam, Warez and Miner installations assigned to this control server self-destruct after one minute. Uncollected income is lost and cannot be collected after shutdown begins. Review the confirmation preview: it shows affected installations and estimated losses separately in game dollars and BTC.
Your IP address, local files, foreign infections on your own server and credited money remain. DDoS and Doom installations do not self-destruct from this shutdown. Remote connection logs remain as possible traces. Simply logging out never triggers a shutdown.
Collectives
Members can view security status. Admins, co-owners and leaders can defend and manage subscriptions; only the leader can trigger emergency shutdown. Members share the collective server's resources and cooldowns.
When installing an external income virus, choose your own server or an authorized collective server as its control server. This assignment cannot be changed later. Income still belongs to the installing player. A collective shutdown only sacrifices installations assigned to that collective server.
Console controls
GUI and console share the same state. Use node IDs from the map as command targets. help security lists the full command help and available arguments.
| Action | Kali | PowerShell | Simple mode |
|---|---|---|---|
| Status | rebels security status | Get-TRSecurity | security status |
| Map | rebels security map | Get-TRSecurityMap | security map |
| Inspect | rebels security inspect --intrusion 12 --node 3 | Get-TRSecurityNode -Intrusion 12 -Node 3 | security inspect 3 --intrusion 12 |
| Breach | rebels security breach --intrusion 12 --node 3 | Invoke-TRNodeBreach -Intrusion 12 -Node 3 | security breach 3 --intrusion 12 |
| Isolate | rebels security isolate --node 3 | Block-TRSecurityNode -Node 3 | security isolate 3 |
Replace example IDs with those on your current map. To open a previously observed target, use rebels security map --ip 16.187.82.139. Console bonuses shorten eligible intrusion actions, not protection periods, pauses, cooldowns or reboot time.