A tour of the web dashboard

The dashboard is one console: a rail of pages on the left, a top bar, and the page you picked. It understands ?domain=, ?panel= and ?area= in the URL. Older ?tab= and ?section= links, and links to the Security sections that moved to Software on 2026-09-23, still land on the page that holds the same thing today.

The rail

Page	What it holds
Overview	Portfolio health in one verdict and the fix queue. Check everything now (Re-check all domains in Advanced) re-checks every domain. Every count comes from your own scan results
Alerts	Every alert the account was sent, newest first, the same feed as the app's Alerts tab. The badge counts unread alerts. See The alerts feed
Fixes	Every open finding across the portfolio, worst first, with the next action for each. The badge counts the urgent ones
Domains	The inventory: add, group, pause, mute and remove domains (one at a time from a row's ⋯ menu, or several at once), sort and filter, and each domain's page. The Vulnerabilities column comes right after the name: "2 hosts affected · 1 exploited" in red when an advisory is confirmed on any host (subdomains included), amber "to check" when one may apply, and otherwise when the software was last read. Vulnerable domains list first, and the Vulnerable filter shows only them
Software	Your software (one list of every application you watch and every application scans found, with the hosts it runs on, version and status; Watch everything we found watches all of it in one tap), IT services pack (the services IT teams typically run, watched because you chose to), Advisory feed (the CISA KEV and NVD feed), Service status (the companies behind your software) and Scan readings (each detection with its evidence, and dismissed readings to restore). Add software to watch searches the catalog
Security	Overview (every domain's security posture), Vulnerability scan (run a scan, prove ownership, see the hosts it covered), Network targets (IP addresses and ranges) and Impostor domains (lookalikes). Run security scan and Scan options sit at the top
SEO	Every domain's SEO side by side; open one for its summary and the whole-site audit
Monitoring	Uptime, Recent incidents, DNS changes, Change log and Page performance
Reports	Generate a PDF report per domain, and Branding
Compliance	PCI-DSS, HIPAA and CMMC control records

At the foot of the rail: Settings and Help.

The top bar

A Simple / Advanced switch changes how findings are worded: plain words, or the technical detail. The account menu (your initials, top right) holds Settings, API keys, Admin (admins only) and Sign out.

A domain's page

Open a domain from Domains or Overview. The page has five tabs:

Overview: a red banner pinned at the top while any host of the domain (subdomains included) runs software with a confirmed advisory, naming each host, the version, how many advisories and the release that fixes them, with Check again and Open advisory per host; then the setup guide, the headline figures, the open findings with a next action each, Hosts and software (every host and the version of everything on it, vulnerable hosts first), What we check (led by Known vulnerabilities), and recent changes.
Site check: the homepage loaded in a real browser as a phone on 4G, scored for Speed, Mobile, SEO, Security, Accessibility and Errors, with a fix for each finding. See Site check.
SEO & search: the SEO workspace for this domain, with sections Overview, Pages, Search intent, Keywords, Local & profile, Competitors, Work queue, Reports, Setup & sources, More checks and Accessibility.
Email & DMARC: DMARC reports, sending sources and managed records.
Uptime: the five-minute probe's history.

Check now re-checks the domain and Ask us to fix these opens a request to the team about everything open on it. The ⋯ menu holds Get help using AI, Open the site, Pause or Resume monitoring, Change group (or Add to a group), Mute findings for 30 days and Remove domain.

The iOS app lays a domain out differently, as modules (DNS, Certificate, Email & DMARC, Website, Site check, Uptime, Vulnerabilities, SEO & accessibility, Impostor domains, Subdomains, Compliance, Reports, History). See The domain page, history and removal.

What is only in the app

Mailbox breach monitoring (the app's Exposure tab) has no web page.

Settings

Six tabs: Profile (account details, Email authentication (DMARC) with your report address, Security & access for two-factor authentication, the QR login for the app, and Delete account), Notifications (the Scanning group sets the cadence; the Alerts group picks which alerts you get), What you watch (who you are, the status pages and software watched for you, and the weekly email), Plan & credits, Report branding and API keys. See Notification settings.

Help

Help at the foot of the rail opens fix guides and a direct line to the team. A request is saved as a support conversation before any notification is sent, with the page you were on, the selected domain, your plan and any scan or error identifiers attached, so the reply can be specific. A domain's ⋯ menu also offers Get help using AI. See Support inbox and Ask NHM.

Dark theme

The web dashboard is dark-only since the 2026-08 redesign. The iOS app has a System / Light / Dark switch under Account, Settings, Appearance.