Is Black Box a website backup?

No. Black Box preserves bounded incident evidence and recovery context. It is not a full website backup and does not replace your normal backup strategy.

What happens if the Controller cannot be reached?

Local protection and local evidence continue. Nexus can retry remote delivery without waiting for ordinary telemetry or WP-Cron.

Does Black Box store customer orders, passwords or request bodies?

The incident channel is designed around privacy-bounded security metadata. It is not intended to collect passwords, cookies, customer order data or arbitrary request bodies.

Can a restored site know an incident was still open?

Where the licensed remote path is available, restore/reconnect awareness can tell a restored site that an unresolved pre-restore incident exists and require recovery validation before closure.

REDLINE Black Box · Evidence Vault

When the site is under pressure, the evidence should not disappear with the moment.

Black Box opens before disruptive containment work. It preserves local incident evidence and can send a signed First Beacon and sequenced incident frames through the licensed Controller connection.

See Breach Command Get Nexus PRO

PRESERVELocal Evidence Vault.Record incident context before disruptive response work.

BEACONSigned remote continuity.Attempt an authenticated First Beacon through the licensed Controller path.

RECONNECTRestore awareness.Recognize unresolved incident context after a supported restore/reconnect scenario.

Evidence before action

Containment should not erase the story you need to investigate.

Black Box is part of the REDLINE response path. Frames are sequenced and hash-linked by the Controller when the remote channel is available, while the local site keeps its own evidence and protection path.

Local Evidence Vault record
Signed First Beacon using licensed site credentials
Sequenced incident frames with chain validation
Heartbeat and communication-loss awareness
Remote path independent from ordinary telemetry batching

BLACK BOXEVIDENCE CHANNEL

LOCAL VAULT

SIGNED BEACON

HASH-LINKED FRAMES

Privacy-bounded incident metadata

What Black Box is for

Preserving critical incident context
Maintaining an off-host continuity signal when available
Supporting emergency notification and communication-loss awareness
Helping a restored site recognize an unresolved prior incident

What Black Box is not

Not a full website backup
Not arbitrary remote control of the WordPress site
Not a copy of customer orders or request bodies
Not a guarantee of recovery from server/root compromise

Evidence that stays connected

Black Box gives serious incidents a memory.

Use it together with Breach Command, REDLINE, Incident Replay and the wider Nexus evidence system.

Explore Breach Command Explore Incident Replay