Schedule a demo

Pick a time with our team. The scheduler is provided by Calendly and sets its own cookies.

Prefer email? support@coriunder.com

We use your details to arrange your demo. Read our Privacy Policy.

Monitoring

Know it broke before they tell you.

Processing, transactions, fraud, balances and payouts each get their own watch, their own rules and their own alerts. Seventeen screens under one Monitoring menu, and three alerting engines behind them that raise the problem instead of waiting to be asked.

Fraud monitoring providers you can integrate

Watching is not the same as alerting

A log you have to remember to open is not monitoring. The screens are there for when you are investigating, and the rules are there so that somebody is told the moment there is something to investigate.

17

Monitoring screens

6

Areas watched

3

Alerting engines

Never

Alerts block payments - only fraud rules can

What is watched

Six areas, each with its own instrument

Processing, fraud, balances, payouts, integrations and the audit trail fail in different ways, on different timescales, and are noticed by different people. They are not one dashboard.

1Nine processing screensLive
Charge attemptsConnection errorsRoutingRequests
2Every attempt, not just the outcome
14:02Acquirer 12Do not honourFail
14:01Acquirer 7Timeout after 30sRetry
14:01Acquirer 3CapturedOK
14:00Acquirer 3Routed by rule 18OK
3Open the raw request
POST acquirer-7 /charge · 14:01:12No reply
Sent, logged, never answered: the acquirer has it.

Processing, down to the attempt

Nine screens cover what actually happened at the provider: every charge attempt and every bank charge attempt, connection errors, the routing rules that fired, the raw request and response history, transaction history, pending events and the per-connector logs. When a merchant says a payment failed and the acquirer says it never arrived, this is the layer that settles it, because it holds the attempt rather than only the outcome.

Transaction management
1Write the ruleScoped to a provider
When
30
declines on
Acquirer 12
within
15 min
sliding windowActive
2Evaluated as each decline lands
Declines · Acquirer 1238 in 15 min
┄ threshold 30crossed 14:03
3The right people hear about it
Emailed the processing desk
Rule fired 14:03 · result recorded
Sent

Transaction monitoring that tells you

Write a rule against your acquirer traffic and it is evaluated as each decline arrives rather than on a schedule, so a provider going bad is caught inside its own sliding window instead of at the next scan. Rules are scoped to the provider and the condition you care about, the result is recorded so you can see what fired and when, and the action goes out as an email to the people who can actually do something about it.

Provider configuration
1Rules, log and report
RulesWhat you wrote
Log4 hits today
ReportStill right?
2Every hit says which rule and why
Velocity6 cards, one deviceBlock
BIN countryIssuer not allowedBlock
Amount limitOver weekly capReview
WhitelistVIP, rules relaxedPass
3Spot a rule blocking good trafficHits per day
BIN country
Rising
worth a second look

Fraud, with the reasoning shown

Fraud monitoring is three screens rather than one: the rules you wrote, the log of what they did, and the report that tells you whether they are still the right rules. Every hit records which rule matched and what it decided, so a blocked customer is a question you can answer in a minute, and a rule that is quietly blocking good traffic shows up as a pattern instead of as a slow leak in approval rate.

The risk rules engine
1Set it once for the programme
Per merchantPer programmePer currency
Alert below
EUR 10,000
cooldown
60 min
2Checked the moment it movesNo scan
Programme wallet · EUR
Payout -1,580.00 → balance 8,420
Below
8,420threshold 10,000
3One crossing, one email
Alert sent14m agoSent
3 more movementsin cooldownSuppressed

Balance alerts that fire on the movement

Set a threshold per currency on one merchant, or once across every customer account in a programme, because configuring tens of thousands of accounts one at a time is not a workflow. The check runs at the moment the balance actually moves rather than on a timer, which is the only moment it can cross, so there is no periodic scan over your entire customer base and no window where the balance is low and nobody knows. A cooldown stops one crossing from becoming fifty emails, and lowering a threshold onto an account already beneath it raises the alert immediately rather than waiting for the next movement.

Balances and ledger
1Three requests, then nothingProvider 4
09:0010:0011:00now
3 requests, all cancelled · nothing since
2Two ways of watching at once

On status changeReacts instantly

Scheduled sweepFires on silence
3Failures and zero successes
At least
3 failed
and
0 succeeded
in 2h
All payouts failingFired

Payouts, where silence is the outage

Payout volume is low enough that a plain count threshold is the wrong instrument. Three requests this morning, all cancelled, then nothing at all is a broken corridor, and no rule that only wakes up when a fresh failure arrives will ever see it. So payout monitoring runs two ways at once: it reacts the moment a wire changes status, and it also sweeps on a schedule specifically so a rule can fire when nothing new has arrived. Alongside the familiar failure count there is a rule for the case that matters here, at least so many failures and not one success in the window.

Settlement and payouts
1Every API call is a lookup
POST /v1/payments · 422Merchant 4192
RequestResponsecurrency missing
2The edges, each with its own log
8,210Webhooks
12Open RFIs
340Status log
27Logged in
3Who changed what, and when
RLMerchant 419211:42Suspended
ASMerchant 331009:15Active

Integrations and the audit trail

The remaining groups cover the edges where a platform quietly stops working for one customer while looking fine for everyone else. Every API call is logged with its request and response, so an integration argument is a lookup. Outbound webhooks record what was delivered and what failed. Requests for information sit in their own queue rather than in somebody's inbox. Account status changes are attributed to a person and a time, and you can see who is logged in right now.

Reporting and analytics
How it works

From a threshold to a person

1

Set the rule

A decline threshold on a provider, a balance floor on a merchant or a whole programme, a failure condition on a payout corridor. Scope, window and condition.

2

It evaluates itself

At the movement for balances, as each decline lands for transactions, and on both the event and a schedule for payouts, so an absence of traffic can still raise an alarm.

3

Someone is told

The alert goes to the named recipients for that rule, with a cooldown so one condition does not become a flood of identical mail.

4

You investigate

The screen behind the alert holds the attempts, the responses and the rule results, so the next step is reading the evidence rather than reproducing the problem.

In the box

Every screen under Monitoring

Charge attempts

Every attempt at the provider, not only the ones that became transactions.

Bank charge attempts

The same view for bank rails rather than card rails.

Connection errors

Timeouts and transport failures separated from business declines.

Debit rules log

Which routing rule fired on a transaction, and why it chose that terminal.

Process requests

The raw request and response exchanged with the provider.

Transaction history

Every state a transaction passed through, in order, with its actor.

Pending events

Queued work the platform still owes, including reports awaiting email.

Connector logs

Per-integration logs for connectors that warrant their own view.

Fraud rules, log, report (four screens)

What you configured, what it did, and whether it is still right.

API call monitoring

Request and response logging across every integration, per programme.

Webhook log

Outbound notifications with their delivery outcome.

Requests for information

Compliance queries as a tracked queue with a state, not as email.

Status change logs

Every account status transition, attributed and timestamped.

Active users

Who is logged into the platform right now.

Balance alerts

Thresholds per merchant, per programme and per currency, with cooldown.

Payout alerts

Failure counts and the all-failed rule, on event and on a sweep.

What did you find out too late?

Tell us about the last incident a merchant reported before you noticed it. We will show you the rule that would have caught it.

Frequently asked questions

  • Do we have to sit and watch these screens?

    No, and that is the point of separating the two. The screens are for investigating once you know there is something to look at. The rules are what tell you, by email, to the recipients you name on the rule.

  • How quickly does a balance alert fire?

    At the movement itself. A balance can only cross a threshold when money actually moves, so the check runs at that moment rather than on a schedule. There is no polling interval to tune and no window in which an account is below its floor without anyone knowing.

  • Can we set a balance threshold across all our customers at once?

    Yes. A threshold can be attached to a single merchant or to an entire programme, in which case it governs every customer account under it. Programmes can hold tens of thousands of accounts, so per-account configuration was never going to be a workable answer.

  • Why do payouts need a scheduled check when nothing else does?

    Because at payout volume the dangerous pattern is an absence. A handful of requests that all fail and are then followed by silence is a broken corridor, and a rule that only evaluates when a new failure arrives can never see it. So payouts are watched both on the event and on a sweep, and there is a rule specifically for failures with no successes at all in the window.

  • Will an alerting problem ever affect processing?

    No. The alerting path is deliberately built so that it cannot throw back into the operation that triggered it. A failure to raise an alert must never roll back or block a balance movement, so monitoring can degrade without taking money movement with it.

  • Will one bad afternoon flood our inbox?

    Each rule carries a cooldown, so a condition that stays true keeps sending one alert rather than one per movement. That is what keeps alerts worth reading, which is the only property that actually matters in a monitoring system.

  • Is there a role that only sees monitoring?

    Yes. Monitoring is one of the admin profiles, so an operations person can be given the watch screens without any ability to move money or change a merchant. Menu visibility follows the profile rather than being managed by hand.

Still have a question?
Watch it in the product

Short walkthroughs from the admin

All tutorials

Monitoring rules

Risk rule templates

Blocking cards, emails and IPs

Stop hearing it from the merchant.

We will set up the rules that matter for your traffic and show you what they catch.

Which screens a given operator sees depends on their admin profile. Talk to our team about your roles.