Validate the target
Check asset, switch, port, VLAN and owner context before running a disruptive action.
Exact use case
Automate Cisco switch port quarantine with local guardrails.
Cyberm8 receives an alert or approved request, validates the port and endpoint context locally, pauses when human approval is required, executes the quarantine action, and records evidence for the SOC and network team.
{
"trigger": "SIEM alert",
"asset": "host-22",
"switch": "access-sw-07",
"port": "Gi1/0/18",
"action": "quarantine_vlan",
"approval": "conditional",
"rollback": "time_bound"
}Containment needs speed and control.
Local switch-port quarantine is a perfect example of where cloud alert request and physical network action must be mediated carefully.
Choose the control mode
Run low-risk actions automatically or pause high-impact containment for human approval.
Record the evidence
Write result, rollback window, operator checkpoint and exception details back to the response record.
Bring one containment workflow into the sandbox.
Prove the path from alert to local action before expanding to endpoint, firewall, identity, or OT containment.