What it does: Ships a ring buffer of recent security events to the Forge AI hourly and stores a severity, a short narrative of the pattern and two to five ordered steps. It reads the site’s own log — it never invents an event. How to access: GuardForge > Settings > AI threat analytics. Off until enabled. Free/PRO: Pro (ai_threat). Notes:

• The same metered action, prompt and price as the free “Explain this event” button: 1 credit (threat_analyze), from the same Forge balance every other Forge AI action draws on. What Pro sells is that it runs on its own, hourly, over everything — not the ability to ask.
• Suppressed entirely while staging mode is on, so a forgotten copy cannot spend the balance.