Premium Features
Explore the advanced capabilities of Login AlertX v4.0 — including multi-channel dispatch, AI anomaly scoring, visual and audio evidence capture, and rich system forensics.
30-Day Full Feature Trial Included
Every new installation includes a 30-day trial with all advanced capabilities, multi-channel routing, and AI detection enabled out of the box — no credit card or account registration required.
Multi-Channel Notification Routing
Route real-time alerts across your personal communication apps, team channels, and automated security pipelines:
Direct Messaging
- WhatsApp: Instant mobile alerts delivered with user, IP, risk score, and event details (optimized for instant text delivery).
- Telegram Bot: Encrypted alerts sent to private chats or security channels via
@LoginAlertX_Bot(supports rich media: webcam photos, screenshots, and audio). - Android Push: Live push notifications on your phone with instant QR-code device pairing (fast text-based alerts).
Email & Team Workspaces
- Email Alerts: Full forensic reports with visual attachments (webcam snapshot, desktop screenshot) and recorded audio clips.
- Slack & Microsoft Teams: Route workstation and server alerts directly into team channels (e.g.
#security-alerts). - Discord & Google Chat: Post structured embed cards on access events.
AI/ML Anomaly Detection & Risk Scoring
Login AlertX features an Ensemble Machine Learning engine that establishes a baseline of typical login behavior and assigns an instant Risk Score (from 0.00 to 1.00) to every session:
| Risk Level | Score Range | Behavioral Indicators |
|---|---|---|
| LOW RISK | 0.00 – 0.39 |
Routine access within normal working hours, familiar local IP subnet, and expected user account. |
| MEDIUM RISK | 0.40 – 0.69 |
Slight behavioral deviation (e.g. unusual off-hours login or first-time private subnet). |
| HIGH RISK | 0.70 – 1.00 |
Foreign geographic IP, multiple failed password attempts, access on dormant accounts, or rapid connection spikes. |
Brute-Force Spike Detection
Monitors rolling authentication failure bursts across short windows and triggers immediate emergency alerts upon repeated bad passwords.
Dormant Account Monitoring
Automatically flags logins occurring on user accounts that have been inactive for 14+ days, preventing unauthorized access on forgotten credentials.
Visual & Audio Evidence Capture
Capture real-time physical evidence of login events for definitive access verification:
Webcam Photos
Email & TelegramCaptures a high-resolution snapshot at the instant of login or lock screen failure.
- Attached to Email & Telegram alerts
- Automatic connected camera detection
- Specific camera selection support
- Viewable in local Analytics history
Ambient Audio Clip
Email & TelegramRecords ambient sound around the workstation immediately upon authentication.
- Attached as audio file to Email & Telegram
- Configurable 1–60s recording duration
- Microphone input device selection
- Playable inside the Analytics tab
Desktop Screenshot
Email & TelegramTakes an instant screenshot of the active desktop immediately after logon.
- Delivered via Email & Telegram
- Automatic multi-monitor scaling
- Windows & Linux desktop support
- Full-screen review in Analytics tab
Privacy Note: Hardware cameras and microphones are never accessed in the background; they are initialized strictly for the single event capture when an active media channel (Email or Telegram) requests evidence, and are immediately shut down.
Network & Forensic Telemetry
Each alert contains comprehensive technical diagnostics to reconstruct access context:
- Network Data: Public IPv4/IPv6, Local LAN IP, and MAC address.
- Geolocation: City, region, country, and ISP derived from connecting IP.
- Reverse DNS: Resolves remote client hostnames on RDP and SSH sessions.
- System Specs: OS build, CPU load, total/available RAM.
- Drive Health: Mounted storage volumes and available free space.
- Audit Log: 1-year searchable history stored in local SQLite database.
Granular Rules & Quiet Hours
- Notification Windows: Define specific time windows (e.g.
08:00 to 20:00) for active alerts, while silently continuing to log all off-hours access in the audit history. - Every Event Triggering: Receive alerts on every single session transition (unlocks, screen locks, user switching, and disconnects) rather than just initial cold logons.
- Account Filtering: Whitelist or monitor specific local users, system service accounts, or administrative users.