Abstract: Systems and methods are disclosed for detecting security threats in a network environment. A local workstation is used to inspect an item and submit a request for assistance to determine whether the item raises a security threat. A server receives the request for assistance from the local workstation over a network, selects a remote expert device that is available to receive the request and routes the request to the remote expert device. In response to the request being accepted at the remote expert device, the server may transmit information associated with the local workstation to the remote expert device and establish a connection between the local workstation and the remote expert device. The remote expert device utilizes attribute information pertaining to the local workstation or local operator to facilitate effective communications between the local workstation and remote expert device for determining whether the item raises a security threat.