Bring frequently accessed domains into audit review
Use scheduled top domain reports to focus your review on the activity Control D has recorded for the selected profile.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Get Profile Analytics Top Domains
Tool to fetch top domains accessed within a specific profile. Use after confirming profile ID.
Why this helps
Manually finding high-traffic domains before a review can consume time better spent assessing risk.
- Focus review on frequently accessed domains.
- Prepare activity data without repeated dashboard visits.
- Keep policy decisions with the reviewer.
Setup
Build it in a few focused steps.
- 1Connect 21risk and Control D once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it.
- 3Tell Notis to retrieve top domains for the specified Control D profile for audit review.
- 4Choose the notis_cron trigger and where run reports should go.
- 5Test with one real profile and review the returned domains.
Questions about this workflow
Will the workflow block risky domains automatically?
No. It retrieves top domains for review. Any policy change needs an explicit decision and a suitable action.
Does this show every query?
No. It uses the top domains analytics action, not the full analytics logs.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 21risk to Control d. A trigger fires from one place; an action lands in another.
21risk triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Tool to delete a Control-D device. Use when you need to remove a device by its identifier after confirming the device_id.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile by ID
Tool to delete a profile. Use when you need to remove a profile by its ID after ensuring it is not enforced by any device.
Delete Profile Rule by Hostname
Tool to delete a specific custom rule by hostname from a profile. Use after confirming profile_id and hostname.
Delete Profile Rule by Rule ID
Tool to delete a specific custom rule by its ID within a profile. Use after confirming profile_id and rule_id.
Delete Profile Rule in Folder
Tool to delete a specific custom rule within a folder. Use after confirming profile_id, rule_id, and folder_id.
Delete Profile Schedule
Tool to delete a specific schedule within a profile. Use after confirming profile_id and schedule_id.
List Known Access IPs
Tool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.
Get Analytics Endpoints
Tool to list analytics storage regions and their endpoints. Use after authenticating to retrieve available analytics regions.
Connect any two apps with Notis in the middle.
21risk and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.