Cobalt Monitoring Intelligence, AI-powered Security Platform

Cobalt Monitoring Intelligence

The AI reasoning layer that sits on top of your existing cameras, access control, and sensors. Dedicated handlers detect, reason through, and resolve security events — so your team focuses on what matters.

Platform Overview

One Platform. Every Event. Every Site.

Cobalt Monitoring Intelligence ingests signals from your cameras, physical access control systems, and sensors — then routes each event through a dedicated AI handler that reasons through it, takes action, and logs every decision with full context.

Ingest

Camera streams, PACS alarms, and sensor data flow into the platform through Edge Processors or cloud connections — no rip-and-replace required.

Reason

Each event is routed to a dedicated handler that classifies severity, checks schedules, correlates video with access control data, and filters false alarms.

Act

Handlers take automated action: resolve non-threats, escalate verified events to security operators, generate service tickets, or trigger PACS lockdown.

Document

Every event is logged with timestamped reasoning, root cause classification, and full video context — creating auditable records for compliance and operational intelligence.

How It Works

Every Handler. One Reasoning Chain.

Whether it is a Door Forced Open alarm, a person detected after hours, or a potential weapon — every handler follows the same four-stage chain, applying event-specific AI logic at every step.

  1. Detect: Camera streams and PACS signals identify the event in real time.
  2. Reason: Handler classifies severity, applies site rules, checks schedules, correlates video with access data.
  3. Act: Automated response: resolve, escalate to security operator, dispatch alert, generate ticket, or trigger PACS lockdown.
  4. Resolve: Event logged with full context, root cause tagged, reasoning chain preserved for audit.

Dedicated AI for Every Event Type

Each handler is purpose-built for a specific security event. It does not just detect — it reasons through context, takes the right action, and documents every decision.

Access Control

Door Forced Open & Door Held Open Handlers

The DFO and DHO Handlers process access control alarms by correlating the PACS signal with live camera footage. The handler checks whether a person exited through a secure zone, whether the door timing matches badge activity, and whether the root cause is a faulty device or a legitimate security event. Non-threats are resolved automatically. Verified events are escalated to security operators with full context.

Video Analytics + Access Control

Tailgating & Unauthorized Entry Handler

Detects when someone enters a badge-controlled door without authorization. The handler correlates video detection with access control data, verifies the intrusion through AI analysis, and escalates confirmed unauthorized entries with timestamped evidence. The system distinguishes tailgating (following an authorized badge-in) from forced unauthorized entry — each with its own escalation path.

Threat Detection

Gun Detection Handler

Identifies a person brandishing a firearm in camera feeds using AI detection models, then routes to mandatory human verification before escalation. Confirmed detections can trigger PACS lockdown procedures, alert security operators, and notify emergency contacts. The handler is designed for high-confidence detection with zero tolerance for unverified automated action on weapon events.

Safety & Medical

Person On Ground Handler

Detects person-down situations in camera feeds for medical emergency response. The handler distinguishes between someone who has fallen and requires assistance versus normal activity like sitting or resting on the ground, using advanced detection models that reduce false positives. Confirmed events trigger escalation to on-site response teams.

Intrusion Detection

Person Detection After Hours

Monitors camera feeds outside of configured business hours and detects human presence in spaces that should be unoccupied. The handler checks the site schedule, verifies detection confidence, and escalates confirmed after-hours presence to security operators with video context and location details. Configurable per site and per zone.

Situational Awareness

Crowd Forming Handler

Detects unusual gathering activity in monitored zones — identifying when the number of people in a defined area exceeds expected thresholds. The handler applies AI analysis to distinguish between normal congregation (lobby traffic, break rooms) and potentially concerning crowd formation that warrants security operator review.

Additional Handlers

The platform continues to expand with new detection and response capabilities.

Person Climbing Fence

Detects perimeter breach attempts at fenced boundaries using camera-based AI detection. Escalates confirmed climbing events with video evidence.

Loitering Detection

Identifies people or vehicles that remain in a defined zone beyond a configurable time threshold. Zone-specific and time-aware.

Rapid Egress Detection

Detects mass exit events that may indicate an emergency evacuation, active threat, or fire alarm condition. Triggers immediate security operator review.

Runaway Alarm Detection

Identifies when a single access point generates an abnormal volume of alarms — flagging device malfunctions or configuration issues before they overwhelm the GSOC.

Periodic Audits

Runs scheduled camera snapshots through configurable workflows to verify specific conditions: doors secure, pathways clear, emergency exits unobstructed, equipment in place.

Automated Alarm Root Causing

AI-driven root cause analysis correlates alarm patterns to identify the underlying issue — faulty REX sensors, misconfigured schedules, or device failures — not just the symptom.

Intelligence & Reporting

Investigate, Measure, Prove

Every event generates auditable data. The Investigator gives your team searchable access to every incident. Metrics dashboards give leadership the proof they need.

Investigator

A searchable event grid with every incident the platform has processed. Filter by date range, site, event status (Open, Acknowledged, Resolved, Non-Escalated), root cause, alarm category, tags, and regions. Each event card includes video thumbnails, camera view, location, and resolution status. Download video footage for any event directly from the grid.

Metrics & Insights

Built-in dashboards provide the data security directors and CISOs need to demonstrate measurable program performance. Track nominal alarm metrics, tailgating metrics, root cause trends, detection metrics, and problematic device identification across every monitored site. All metrics are based on GSOC-processed incidents — the alarms that actually reach your security operators — not raw system signals.

Transparent Metrics

Every metric is based on GSOC-processed incidents — the real workload your operators face. Self-service dashboards let your team audit every claim independently.

Root-Cause Intelligence

The platform does not just auto-close alarms. It identifies the underlying cause — faulty devices, misconfigured schedules, recurring patterns — and surfaces actionable intelligence for proactive maintenance.

Single System of Record

Your operators work in one interface. Bidirectional PACS sync, unified event views, and 100% alarm coverage — no toggling between systems, no fragmented workflows.

Integrations

Works With Your Current Systems

Cobalt Monitoring Intelligence connects to your existing infrastructure. No rip-and-replace. Edge Processors add AI-powered monitoring as a layer on top of your current investment.

Access Control Systems

Video Management & Ingest

Identity & SSO

Ticketing & Workflow

Communication

Deployment

Edge, Cloud, or Hybrid

Choose the deployment model that fits your data sovereignty requirements and infrastructure. Most enterprise customers use a hybrid approach.

Edge Deployment

Edge Processors installed on-prem at each site. All video processing happens locally — only metadata and event summaries reach the cloud. Ideal for sensitive locations with strict data residency requirements.

Cloud Deployment

Fully managed monitoring with no on-prem hardware requirements. Camera streams connect directly to the cloud platform. Fastest deployment path for distributed sites and smaller locations.

Hybrid Deployment

Edge processing at sensitive locations (data centers, headquarters) combined with cloud monitoring at distributed sites (branch offices, executive residences). The most common enterprise configuration.

Industry Solutions

Built for Your Industry

Cobalt Monitoring Intelligence is deployed across the industries with the most demanding security monitoring requirements.

FAQ

Common Questions

What is a Handler in Cobalt Monitoring Intelligence?

A handler is a dedicated AI workflow built for a specific security event type. Each handler follows a four-stage reasoning chain — Detect, Reason, Act, Resolve — applying event-specific logic at every step.

Does Cobalt Monitoring Intelligence require replacing existing security systems?

No. The platform integrates with your existing physical access control systems and video management systems. Edge Processors connect to your current camera streams and access control data, adding AI-powered monitoring as a layer on top of your existing infrastructure.

How does the platform handle false alarms?

Each handler applies AI reasoning to classify whether an event is a genuine security incident or a false alarm. Up to 94% of events are resolved by handlers without human escalation.

Can the platform scale across multiple sites?

Yes. Cobalt Monitoring Intelligence is designed for enterprise-scale deployments across 50 or more sites. Security leadership can maintain consistent monitoring standards across geographies while enabling site-specific customization for escalation paths, operating hours, and handler sensitivity.

What metrics and reporting does the platform provide?

The Metrics and Insights dashboards track nominal alarm metrics, tailgating metrics, root cause trends, detection metrics, and problematic device identification.

What is the difference between edge, cloud, and hybrid deployment?

Edge deployment installs Edge Processors on-prem at each site, while cloud deployment connects directly to the cloud platform. Hybrid combines both.

How does the platform ensure transparency in AI decisions?

Every handler decision is documented with a timestamped reasoning chain visible in the Monitor view. The Investigator preserves the complete event history, and Metrics dashboards break down handler performance versus human escalation rates.