Current Status
The Current Status tab displays real-time data on your organization's security posture. You can identify the most prevalent vulnerabilities, assess the risk distribution of your applications, and get a quick overview of your remediation efforts. The following information is displayed.
-
OWASP Vulnerabilities - Displays the total number of vulnerabilities detected across your organization that align with the OWASP Top 10 list. Click arrow to view detailed information in list or distribution graph formats.
-
SANS Vulnerabilities- Displays the total number of vulnerabilities detected across your organization that align with the SANS Top 25 list. Click the arrow to view detailed information in list or distribution graph formats.
-
FortiGuard Outbreaks - Displays the total number of FortiGuard Outbreak Alerts detected across all your applications. FortiGuard Outbreak Alerts identified by FortiGuard Labs provide critical information about ongoing cybersecurity attacks with significant potential impact. Click arrow to view detailed information.
-
Supply Chain Threats - Displays the total number of supply chain threats detected across all your applications. A supply chain threat is a potential risk or vulnerability within the production and distribution process that can compromise the security, integrity, or availability of products, services, or data. Click arrow to view detailed information.
-
Top Vulnerable Applications - Lists applications with the highest number of vulnerabilities or the highest risk ratings. Use the dropdown to sort By Risk Rating or By Vulnerability Count. Click on an application name or the arrow to view the application's scan details. See Viewing Scanned Application Details.
-
Application Risk Rating Spectrum: A donut chart showing how many applications fall into each risk level (Critical, High, Medium, and Low).
-
Vulnerability Status Distribution: Chart showing the percentage of applications with vulnerabilities in different statuses (New, Confirmed, In Review, Reopened, Fixed, Risk Accepted, False Positive, and Removed).
-
Open vs Fixed Vulnerabilities: Chart displaying the percentage of open and resolved vulnerabilities, grouped by severity.
-
Window of Exposure by Severity: Measures the average time (in days) between when a vulnerability is detected and when it's successfully fixed, grouped by severity.