Synthetic security telemetry showing policy enforcement, threat blocking, secure tunnels, DNS controls, and incident classification.