# Investigate a connection

> Investigate a connection on your Mac to see a risk score out of 100, the reasons behind it, what FireAI saw, and your choices, all on one page.

FireAI Docs (HisnLabs) · Feature · Available since FireAI 0.1.0
Canonical: https://hisnlabs.com/fireai/en/docs/investigate-a-connection

**Where in FireAI:** Threats › Investigate, or World map › a line › Investigate…

Decide with the facts in front of you, not a vague warning.

## What it does for you

Open Investigate from a row in Threats, or from a line on the World map. The dossier explains a connection step by step, so you can judge it yourself. Turn on threat lists first — see [turning on threat lists and investigating](https://hisnlabs.com/fireai/en/docs/turn-on-threat-lists-and-investigate).

## What you’ll see

| Section | What it tells you |
| --- | --- |
| The label and score | Looks normal (under 30), Slightly unusual (30 to 59), Suspicious combination (60 to 84) or Very likely harmful (85 and up), with the score out of 100 as a bar. |
| Threat lists | How many of the threat lists you turned on name this destination, for example “0 of 6”. |
| Why | Each sign that raised the score: no developer signature, contacted by raw IP with no name, first time this app contacts it, cloud provider network, night-time activity, and so on. |
| AI summary | Optional: the on-device AI explains the evidence in three plain sentences, with links to its sources. |
| What FireAI saw | First and last time seen, which apps used this destination, and the company behind it. |
| What do you want to do? | Block for every app, Block only for this app, or It’s fine. |

## Good to know

> **Note:** A single sign rarely means much: a new app contacting a cloud server is ordinary. The score adds signs up so a real combination stands out, and you always make the call.

## Read next

- [The Threats page: what looks wrong, and why](https://hisnlabs.com/fireai/en/docs/the-threats-page.md)
- [The on-device AI model, opt-in](https://hisnlabs.com/fireai/en/docs/on-device-ai-model.md)
- [Turn on threat lists, and investigate a flagged connection](https://hisnlabs.com/fireai/en/docs/turn-on-threat-lists-and-investigate.md)
- ["Why block this?": what a destination usually sends, and why people block it](https://hisnlabs.com/fireai/en/docs/why-block-this.md)

---

Try every feature free for 17 days, no card needed. 30-day money-back guarantee. [Download for Mac](https://hisnlabs.com/fireai/en/download)