Skip to main content
The observability dashboard gives you a real-time view of your Truthlocks environment directly in the console. Use it to track attestation activity, monitor service health, spot latency trends, and check plan usage — all without leaving the browser.
The observability dashboard is available on Business and Enterprise plans. If you are on a Free or Starter plan, you will see an upgrade prompt when you navigate to the dashboard. See billing for plan details.

Opening the dashboard

Navigate to Observability in the console sidebar. The dashboard loads your current environment’s data and begins auto-refreshing every 30 seconds. Click Refresh at any time to fetch the latest data immediately.

Dashboard tabs

The dashboard is organized into four tabs:
TabWhat it shows
OverviewTop-level stats, performance metrics, attestation lifecycle breakdown, and a compact service status panel.
ServicesPer-service health, SLA compliance bars, uptime percentages, and latency details for each microservice.
Usage & QuotasCurrent consumption of mints, verifications, storage, and other metered resources against your plan limits.
SecurityCryptographic integrity, tenant isolation, and audit trail posture cards with detailed control tables for cryptography, access, and data protection.

Overview

The overview tab displays four primary stat cards:
  • Total attestations — active, revoked, and superseded counts.
  • Active issuers — how many of your issuers are currently trusted.
  • Audit events — total events recorded with hash-chain integrity.
  • System health — how many backend services are healthy out of the total monitored.
Below the stat cards, three performance gauges show:
  • Average latency across all services.
  • P95 latency — the worst-case response time for the slowest service.
  • Health checks performed since the page was opened.
An attestation lifecycle panel breaks down your total attestations into active, revoked, and superseded / other categories with proportional progress bars. Summary tiles show your total roles, issuers, and attestation counts. A compact service status list shows the health of each backend service at a glance. A latency sparkline chart tracks response times over recent health checks, color-coded by speed:
ColorLatency
GreenUnder 200 ms
Blue200–500 ms
Amber500 ms – 1 s
RedOver 1 s

Services

The services tab shows the health of seven backend services:
ServiceDescription
Trust RegistryIdentity, issuers, keys, and governance
Attestation ServiceCredential minting and lifecycle
Signing ServiceCryptographic key management and signing
Transparency LogTamper-evident append-only Merkle tree
Verification ServiceCredential verification and validation
Audit ServiceTamper-proof audit trail with hash chaining
Billing ServiceUsage metering and subscription management
Each service displays its current status (healthy, degraded, or down), response time, and session uptime percentage. An SLA compliance bar compares each service’s uptime against the 99.9% target. A service is marked degraded when it responds but takes longer than 2 seconds, and down when it fails to respond within the 5-second timeout.
Uptime percentages shown on the services tab are session-scoped — they reset each time you open the dashboard. For historical uptime data, visit the public status page or query the status API.

Usage and quotas

The usage tab shows your current consumption for each metered resource — mints, verifications, storage, and any other plan-limited operations. Progress bars indicate how close you are to each limit.
If a usage meter is approaching its limit, consider upgrading your plan or contacting support for a custom quota. Once a limit is reached, API requests for that operation return HTTP 402. See rate limits for details.

Security

The security tab gives you a live view of your environment’s security posture across three dimensions. At the top, three posture cards summarize overall strength:
Posture cardWhat it measures
Cryptographic integrityEd25519 signatures, SHA-256 audit hashing, and Merkle tree transparency.
Tenant isolationPostgreSQL row-level security, per-tenant keys, and gateway-level enforcement.
Audit trailHash-chained event count with integrity verification status. Shows “Attention” until your first audit event is recorded.
Below the posture cards, individual security controls are grouped into three categories:

Cryptographic controls

ControlAlgorithmDescription
Attestation signingEd25519 (EdDSA)Every attestation is cryptographically signed with an Ed25519 key.
Audit hash chainSHA-256Audit events are chained with SHA-256 hashes so tampering is detectable.
Auth / JWKSES256 (ECDSA P-256)JWT tokens and JWKS keys use ES256 for authentication.
Transparency logMerkle tree / SHA-256A tamper-evident Merkle tree provides public auditability.

Access controls

ControlMechanismDescription
Row-level securityPostgreSQL RLSAll database tables enforce tenant isolation at the row level.
RBACRole-based access controlGranular permissions scoped to your defined roles.
API gatewaynginx + rate limitingPer-IP and per-tenant rate limits enforced at the gateway.
Service authInternal service keysService-to-service communication is authenticated with shared keys.

Data protection controls

ControlMechanismDescription
Tenant isolationMulti-tenant RLSComplete data segregation between tenants at the database level.
Audit immutabilityAppend-only + hash chainEvents cannot be deleted or modified after creation. Shows “Attention” until your first event is recorded.
Key rotationPer-issuer key lifecycleKeys can be rotated and superseded without losing historical attestations.
Each control shows an Enforced badge when active or an Attention badge when it requires action (for example, if no audit events have been recorded yet).

Auto-refresh

The dashboard polls all data sources every 30 seconds. The status indicator in the top-right corner shows the last update time and overall system health:
  • Green pulse — all systems operational.
  • Amber pulse — one or more services degraded.
  • Red pulse — one or more services down.

Programmatic monitoring

For machine-readable health data outside the console, use the status API or the billing usage endpoint. These endpoints let you integrate Truthlocks metrics into your own dashboards or alerting pipelines.

Next steps

Health and readiness

Health endpoints, status page, and monitoring integrations.

Billing usage

Track mints, verifications, and storage via the API.

Rate limits

Plan quotas and how to handle 429 and 402 responses.

Audit logs

Query and export your audit trail.