Demo Mode

Shareable no-login demo with pre-seeded realistic security data. Resets every 24 hours. Destructive actions disabled.

Route: /demo

How demo mode works

Overview

How Demo Mode Works

The demo page at /demo gives visitors a live preview of the platform with pre-seeded realistic data. No login required.

What's pre-loaded:

50 simulated EDR agents (Windows, Linux, macOS)
500 SIEM events from multiple sources
47 open alerts across all severity levels
3 pre-built attack scenarios (Ransomware, Credential Theft, C2 Beaconing)
1,204 IOC watchlist entries
Active compliance scores across 4 frameworks

What's disabled in demo mode:

Quarantine / release endpoints
Playbook execution (SOAR)
Agent deployment
Settings changes
User management

Locked features show an "Upgrade to unlock" badge instead of the action button.

Sharing the demo

The demo URL is https://portal.guardfoxsecurity.com/demo. A copy-link button generates the URL. Share it with prospects — no account creation needed.

Demo banner

When DEMO_MODE=true is set in the environment, a persistent banner shows at the top of every page: "You're viewing a demo — data resets every 24h" with an Upgrade button.

Enabling demo mode

Setup

Enabling Demo Mode

Set in your .env.local:

DEMO_MODE=true
DEMO_RESET_CRON="0 0 * * *"   # Reset at midnight UTC daily

Then seed the database with realistic demo data:

npx prisma db seed -- --demo

The seed script creates:

6 demo user accounts (one per role level)
42 EdrAgent records across all OS types
500 SIEMEvent records from 8 sources
47 Alert records at all severities
14 open Incident tickets
1,204 ThreatIndicator records
Pre-configured SOAR playbooks

Resetting demo data

Data resets automatically at midnight UTC if DEMO_RESET_CRON is set. To reset manually:

npx prisma db seed -- --demo --reset