Skip to main content

Working with Results Overview

Once a scan finishes, you move on to understanding and acting on the risks that were found. Even for the same results, the perspective you need depends on your goal. When surveying the whole organization there is the dashboard, when handling individual items there is vulnerability management, and when checking standards compliance there is the compliance view, each prepared for the situation at hand.

The fastest flow for reducing risk is as follows.

  1. In the [Dashboard] , identify the most at-risk services and items right now.
  2. Enter vulnerability management (triage) and work through items by severity and KEV priority.
  3. Organize recurring exceptions as false positive or accepted risk to reduce noise.
  4. Check improvement trends with the security score , and share with stakeholders via reports and VEX .
  5. Stay continuously aware of new threats affecting your assets through security news .

Next steps​

At a glanceDashboardOrganization-wide risk on one screenHandleVulnerability ManagementReview individual findings, false positive/accepted riskStandardsComplianceOWASP/CWE/KISA compliance statusMetricsSecurity ScoreSecurity posture and improvement trendsShareReports & VEXPDF reports and VEX exportThreatsSecurity NewsLatest threats affecting your assets