Getting Started with GetReal Protect – GetReal Security

Welcome

GetReal Protect detects deepfakes and synthetic media in real time across Microsoft Teams, Cisco Webex, and Zoom. When a threat is identified during a live meeting, your security team is notified immediately.

This guide covers your first login, the key areas of the platform, and where to go for common tasks.

Signing In

Go to app.getreallabs.com and sign in with Google, Microsoft, Slack, Webex, Zoom, or your SSO/OIDC provider — whichever your organization uses. Your existing credentials and MFA apply automatically.

First-time users

Your organization must be provisioned before you can sign in. If you get an error on first login, contact your GetReal administrator or support@getrealsecurity.com.

Platform Overview

After signing in, you land on the Dashboard. The platform is organized into the following areas, accessible from the left navigation.

Dashboard

Your organization’s meeting activity and external exposure at a glance, based on the last 30 days — meetings analyzed, participants observed, external participants, ranked external-exposure lists, and location and network context. See the Attack Surface Dashboard Guide for details.

Identity Violations

Where you investigate detections. Each row is a meeting where one or more threats were flagged. Open a violation to review evidence, classify the outcome, and close the investigation. See the Platform Investigation Guide for the full workflow.

Integrations

Manage connections to your conferencing platforms, SIEM/SOAR destinations, and notification channels. Each integration shows its current status.

Policies

Control what happens when a detection fires — from host alerts to SIEM forwarding to participant removal. Notification destinations (email, Slack, in-meeting messages) are configured on policy actions here. See the Policies Configuration Guide for details.

Users and Roles

Manage user accounts and role assignments (Admin only).

Audit Logs

Review the audit trail of user and administrative activity in the platform (Admin only).

Key Concepts

Concept	Description
Trust Advisor	The GetReal bot that joins your meetings and analyzes audio and video in real time.
Identity Violation	Created when a threat is detected during a meeting. Includes the meeting details, participant evidence, and the detections that triggered it.
Detection	A specific finding within a violation — face swap, synthetic audio, voice biometric mismatch, face biometric mismatch, suspicious camera, or threat intelligence match.
Severity	Every violation is assigned a severity level: Critical, High, Medium, or Low.
Policy	A rule that triggers automated actions when a detection fires — notifications, SIEM forwarding, participant removal, etc.

Common Tasks

Task	Where to go
Investigate a detection	`Identity Violations`
Review meeting activity	`Dashboard`
Configure a SIEM or SOAR destination	`Integrations` (SIEM and Streaming categories)
Set up alert notifications	`Policies`
Tune detection thresholds	Detection severity thresholds are tuned per tenant by GetReal — contact your GetReal team.
Add or manage users	`Users and Roles`
Connect a conferencing platform	`Integrations`

Next Steps

Review the Platform Investigation Guide to learn how to investigate violations end to end.
Check your platform-specific integration guide (Microsoft Teams, Cisco Webex, or Zoom) to confirm your deployment.
Configure Policies for your response actions. To tune detection thresholds, contact your GetReal team.
Set up Notification and Alert Routing so detections reach the right people.

Support

Email

support@getrealsecurity.com

Support Portal

support.getrealsecurity.com