Getting Started with GetReal Protect – GetReal Security

Welcome

GetReal Protect detects deepfakes and synthetic media in real time across Microsoft Teams, Cisco Webex, and Zoom. When a threat is identified during a live meeting, your security team is notified immediately.

This guide covers your first login, the key areas of the platform, and where to go for common tasks.

Signing In

Go to app.getreallabs.com and sign in with Google, Microsoft, Slack, Webex, Zoom, or your SSO/OIDC provider — whichever your organization uses. Your existing credentials and MFA apply automatically.

First-time users

Your organization must be provisioned before you can sign in. If you get an error on first login, contact your GetReal administrator or support@getreallabs.com.

Platform Overview

After signing in, you land on the Home Dashboard. The platform is organized into the following areas, accessible from the left navigation.

Home Dashboard

A high-level view of activity across your environment — detected violations, alert breakdown, and total meetings monitored. Use the time selector to view the last 24 hours, 7 days, 30 days, 180 days, or a custom range.

Attack Surface Dashboard

Your organization’s meeting activity and external exposure at a glance — meetings analyzed, participants observed, and external domains your team is interacting with. See the Attack Surface Dashboard Guide for details.

Identity Violations

Where you investigate detections. Each row is a meeting where one or more threats were flagged. Open a violation to review evidence, classify the outcome, and close the investigation. See the Platform Investigation Guide for the full workflow.

Integrations

Manage connections to your conferencing platforms, SIEM/SOAR destinations, and notification channels. Each integration shows its current status.

Policies

Control what happens when a detection fires — from host alerts to SIEM forwarding to participant removal. See the Policies Configuration Guide for details.

Settings

Manage users and roles, notification destinations (email, Slack, webhook), and audit logs.

Key Concepts

Concept	Description
Trust Advisor	The GetReal bot that joins your meetings and analyzes audio and video in real time.
Identity Violation	Created when a threat is detected during a meeting. Includes the meeting details, participant evidence, and the detections that triggered it.
Detection	A specific finding within a violation — face swap, synthetic audio, voice biometric mismatch, suspicious camera, or threat intelligence match.
Severity	Every violation is assigned a severity level: Critical, High, Medium, or Low.
Policy	A rule that triggers automated actions when a detection fires — notifications, SIEM forwarding, participant removal, etc.

Common Tasks

Task	Where to go
Investigate a detection	`Identity Violations`
Review meeting activity	`Home Dashboard` or `Attack Surface Dashboard`
Configure a SIEM or SOAR destination	`Integrations > Webhooks`
Set up alert notifications	`Settings > Notifications`
Manage detection thresholds	`Policies`
Add or manage users	`Settings > Users`
Connect a conferencing platform	`Integrations`

Next Steps

Review the Platform Investigation Guide to learn how to investigate violations end to end.
Check your platform-specific integration guide (Microsoft Teams, Cisco Webex, or Zoom) to confirm your deployment.
Configure Policies for your detection thresholds and response actions.
Set up Notification and Alert Routing so detections reach the right people.

Support

Email

support@getreallabs.com

Support Portal

support.getreallabs.com