Mobile app (Android)

The monsys app puts the alert chain in your pocket: open alerts per host, resolving, the status of servers and platforms, pending approvals and the emergency stop for the pentest layer. Android first; iOS follows.

Pairing

In the dashboard: Settings → Mobile devices → Pair a device (TOTP). You get an 8-character code, valid for 10 minutes, single use. Tick View only for a shared NOC tablet or a device you trust less.
In the app: type the code (or scan the QR). The app receives its own device token, kept in Android Keystore-encrypted storage; your password never reaches the device.
The device appears in the list; revoke it in one click (“phone lost”) or switch it to view only.

What you can do, and what the device decides

Your role (viewer/editor/admin) decides what you may do, exactly as in the dashboard.
The device mode decides where: a device paired as view only is refused every write: even if you are owner, even with TOTP.
Every write asks for your TOTP code (resolve, cancel an action, emergency stop). Nothing is queued locally; offline you can only look.
Everything you do from the phone lands in the audit log, with the device id.

Push without Google

The app uses UnifiedPush. Install the ntfy app, set https://push.monsys.ai as its server and open monsys → Settings → Push. The hub sends alerts straight to your device’s endpoint; no Google services are involved and content never leaves the hub. Per device you choose the minimum severity (info / warning / critical). Critical alerts use a channel that breaks through Do Not Disturb.

Screens

Five tabs. Everything taps through: host → alert → host, pixel → host or platform, alert → AI explanation.

Overview: counters (critical / warning / silent / waiting for me), Trust Score, the fleet as a pixel grid, who is on-call, latest alerts.
Inbox: open alerts grouped per host (or as a list), filters by severity and “mine”. Per alert: Resolve, Assign to me, Snooze (1 h, 4 h, until tomorrow 08:00, 1 week). Every action is confirmed with your fingerprint.
Alert: full text, AI explanation on demand, timeline, other open alerts on the same host, button to the host.
Fleet: servers and platforms, search, “worst first” or by name.
Host: CPU/memory/load now and as a 24 h chart, status, open alerts, services, containers, CVE counters, uptime checks, recent patches. Actions: update agent, rescan inventory, 2 h maintenance window, restart app, mute push for this host.
Platform: hygiene (debug, xmlrpc, file_edit, …), integrity, components with an update or CVE, actions Update / (De)activate through the plugin (backup → apply → post-checks → rollback), action log.
Security: attacks in the last 24 h, vulnerabilities (critical / high / KEV), pentest status and the kill switch: stops every running pentest scan for the tenant and blocks new ones until released; touches no servers or services. Expiring certificates (< 21 days).
More: approvals (emergency actions EAT, platform actions, playbooks), run playbooks, restart applications, on-call, mobile devices (revoke, view-only), audit log, reports, settings.
Settings: push floor, quiet hours (critical always gets through), muted hosts, biometric lock (immediately / 30 s / 5 min after background), language, update button, unpair.

Lock: one prompt on cold start and on return after the configured delay; cancelling shows a screen with Unlock again. Never two prompts at once.

Install and updates

Download the APK at https://get.monsys.ai/releases/mobile/latest/monsys.apk. The app checks the hub’s signed release manifest itself and shows an update button when a newer version exists. The APK is signed with GoTrust’s release key; Android refuses updates signed with any other key.