# Query editor

Read the graph in Cypher, or ask in plain English and let the console write the query for you. Every query is read-only.

## 1. Write or generate a query

Describe what you want in plain English and press Generate to turn it into Cypher, or write Cypher yourself. Run with the button or Ctrl+Enter.

![The Query Editor in the console: a plain-English box with a Generate button, a Cypher editor below it with an example query, a Run action, and Templates and History controls.](/docs/shots/query-editor.png)

*The editor. Describe the query in plain English and Generate, or write Cypher directly. Ctrl+Enter runs it.*

![The Cypher editor with a query written in, ready to run.](/docs/shots/query-editor-with-query.png)

*A Cypher query, ready to run against the graph.*

## 2. Templates

A library of prebuilt queries grouped by goal, from threat assessment to IP and domain threat feeds to ASN reputation. Insert one to adapt it.

![The Templates panel in the Query Editor, shown with demo data: a scrollable library of prebuilt queries grouped by goal, such as Threat Assessment, IP Threat Feeds, Domain Threat Feeds, and ASN Reputation, each with an Insert action.](/docs/shots/query-templates.png)

*The template library: prebuilt queries grouped by goal. Insert one to load it into the editor. Demo data.*

## 3. Results

Results render as a table, a graph, raw JSON, or a query plan, with row count and timing. Every query is read-only and limited; export to CSV.

![Query results in the console, shown with demo data: a table of rows with Table, Graph, Raw, and Plan views, a row and timing count, an Export CSV action, and a note that the query is read-only.](/docs/shots/query-result-table.png)

*Results render as Table, Graph, Raw, or Plan. Queries are read-only and limited; export to CSV. Demo data.*

## 4. History

History keeps your recent runs.

![The History panel in the Query Editor, empty, with a note that runs will appear here.](/docs/shots/query-history-panel.png)

*History keeps your past runs. Empty here in a fresh demo workspace.*