Situation Room
Monitor geospatial events, infrastructure, network threats, tracking data, and financial signals
The Situation Room is Y2's map-based workspace for combining current OSINT events, Y2 report findings, network threats, reference infrastructure, tracking data, live media, and financial indicators.
Situation Room access requires an active Lite, Pro, or Elite workspace. Free workspaces see an upgrade wall. All three enabled plans currently receive the same 50-layer selection limit and one-minute refresh entitlement.
Open the monitor
Select Situation Room
Open Situation Room in the signed-in app. /app/osint redirects to the monitor at
/app/osint/monitor after Y2 verifies the active workspace's access.
Choose a map view
Use the map controls to switch between the 3D globe and 2D Mercator map, and between the default and satellite basemap. The monitor starts in the global globe view.
Set the event window
Choose 1H, 6H, 24H, 48H, 7D, or ALL. The default is 24 hours.
Select layers
Use the rail on the left to toggle layer entries. Press L outside a text field to collapse
or expand the sidebar. New users start with every registered entry selected, and later changes
are saved to their map preferences.
Inspect the map
Select an event or tracking marker for its source and context. Select a country polygon to open the country intelligence card. Press Escape to close the selected country.
Understand the map controls
Time range
The time bar changes the minimum timestamp sent to the cached map-event query. It applies to event markers such as earthquakes, conflicts, weather, fires, and Y2 report events. Static reference overlays—such as cables, bases, facilities, ports, cameras, and satellite assets—do not become historical merely because the event window changes. Live tracking tables also use their own freshness and expiry rules.
Regions and theaters
The header includes Global, six geographic theaters, and two thematic views:
| Type | Views |
|---|---|
| Geographic | MENA, Africa, Latin America, Asia-Pacific, Europe, North America |
| Thematic | Energy & Resources, Government / Policy |
Selecting a header view moves the camera to its configured viewport. It does not replace the active layer selection. The desktop Theater Intel dock separately groups recent events into the same eight theater definitions.
Location and cursor context
The desktop header can request browser geolocation and center the map on the result. It also shows the current cursor coordinates. Y2 uses marker, cursor, theater, and time-window context to prepare queries in the API tool; it does not send browser location until you request it.
Layer registry
The current registry contains 27 selectable entries across seven groups.
“All Satellites” and its five subtypes are related controls. The 27 count describes selectable registry entries, not 27 independent upstream feeds.
When every entry is enabled, the map still may not show a marker for every layer. A source can have no current rows, a row can fall outside the selected time window, a reference layer can require a closer zoom, or an upstream integration can be unavailable.
Current tracking status
The tracking status widget appears only when at least one tracking source has usable data or a recorded aircraft sync timestamp.
| Layer | Current ingestion state |
|---|---|
| Aircraft Tracks | The Wingbits aircraft cron has been disabled since May 8, 2026 to stay within the shared request budget. The layer remains registered but automatic aircraft scans are not running. |
| GPS Interference | Wingbits GPS zones run on cadence tiers ranging from hourly hot zones to a daily verification sweep. |
| Naval Vessels | USNI fleet data syncs daily; the upstream fleet report itself updates less frequently. |
Do not interpret an empty Aircraft Tracks layer as proof that no aircraft are present. It currently reflects disabled scheduled ingestion, not a negative intelligence finding.
Country cards
Select a country to open its intelligence card. Depending on available data, the card combines:
- A country instability index and recent change.
- An AI-generated or cached country brief.
- A seven-day event timeline and active signals.
- Infrastructure exposure from reference datasets.
- Related headlines, prediction markets, and a stock-index indicator.
- A Markdown export assembled in the browser.
Country cards combine static country profiles with live queries, so one section can have data while another is empty. See Country Intelligence Cards for field and scoring details.
Desktop analysis panels
The desktop monitor adds controls that are intentionally hidden on screens below the medium breakpoint.
Right-side tool rail
Intel Findings
Lists countries or regions whose computed instability index is rising, sorted by delta.
Network Intel
Explores recent malware infrastructure and can open related indicators, entities, and network context.
Search
Searches ontology entities after two characters and opens a live relationship graph for a selected result.
API Query
Builds OSINT area, signal, and report requests from the selected marker, cursor, region, and time range.
The API Query tool produces URLs and curl snippets. It does not bypass authentication. Creating
new API keys and using scoped REST access requires Pro or Elite even though Lite can use the
in-app Situation Room.
Bottom dock
The resizable desktop dock contains:
- Live media: eight configured YouTube news channels, loaded muted by default.
- Theater Intel: recent cached events grouped across six geographic and two thematic panels.
- FININT: market, energy, and macro indicators with recent values and detected signals.
These panels are not rendered on mobile; the map, layer selector, time range, markers, tracking status, cameras, and country card remain the primary mobile surfaces.
Data and source health
Map data is a mixture of scheduled third-party syncs, Y2-derived observations, typed intelligence tables, and versioned static reference assets. “Live” means the interface updates reactively when stored data changes; it does not mean every upstream provider streams continuously or has the same refresh interval.
Use Sources in the monitor header to inspect the source registry, last-success state, record counts, errors, and dataset-specific notes. See Intelligence Sources and Data Infrastructure before treating freshness across layers as uniform.
Entitlements and unfinished management surfaces
Lite, Pro, and Elite currently share these Situation Room entitlement values:
| Limit | Value |
|---|---|
| Selected map layers | 50 |
| Alert rules | 100 |
| Countries per watchlist | 50 |
| Refresh interval | 1 minute |
| Snapshot retention | 90 days |
The backend includes authenticated mutations for watchlists and alert rules and enforces these limits. The current Situation Room monitor does not expose a watchlist or alert-rule management screen, so do not rely on the quota table as evidence that those app workflows are available.
Elite additionally enables organization workspaces, members, and audit logs. Review Plans and Limits for the surrounding profile, API, and workspace differences.
Next steps
Review source health
Identify which providers and datasets back each monitor surface.
Understand data flow
Follow ingestion, normalization, identity, and API representations.
Use country cards
Interpret country-level scores, events, markets, and exports.
Query OSINT by API
Use scoped REST endpoints outside the monitor.
Compare OSINT platforms
Compare Y2 with Maltego, Flashpoint, Recorded Future, Palantir, and MISP by use case.