Threat Pulse · Deep dive
Cost anomaly
Spending patterns shifted abnormally, a quiet signal that often precedes a loud incident.
0
Blocked · last 24h
0
Blocked · last 7 days
24h activity
How we stop it
Cost baselines per agent catch drift early. Anomalies alert before they become overruns.
Frequently asked
Q
What is cost anomaly?
Spending patterns shifted abnormally, a quiet signal that often precedes a loud incident.
Q
How does Rogue-Agent Defense stop cost anomaly?
Cost baselines per agent catch drift early. Anomalies alert before they become overruns.
Q
What should I do if I see cost anomaly in the Threat Pulse feed?
Nothing urgent: the feed only shows attacks that were already blocked or flagged. If one class keeps appearing, review the linked defense guide and check your agents' allowlists, data boundaries, and spend caps.
Counts are real enforcement rows, anonymized. Attack classes seen in fewer than three workspaces never get a page.