Skip to main content

Compliance

Maps found vulnerabilities to standard security baselines and shows the compliance status. Beyond individual findings, you can see at a glance "which standard you meet and how well", which is directly useful for audit response and priority decisions.

Supported standards​

  • OWASP (e.g., OWASP Top 10)
  • CWE (vulnerability type classification)
  • KISA and other domestic standards

Coverage and drill-down​

  • Shows as a percentage how well you comply with each standard.
  • Click an item to drill down to the related findings. It links precisely at the service and analysis level.

Compliance coverage

Mapping basis

Compliance mapping is based on classification information such as the CWE of each finding. Items without classification information may not be mapped.

Organization-unified view​

You can view the compliance of multiple services aggregated at the organization level. Deleted (trashed) services are excluded from the aggregate, so only currently operating services are accurately reflected.

Compliance organization-unified

Next steps​

Vulnerability ManagementHandle non-compliant itemsReports & VEXShare compliance status as a reportSecurity ScoreConfirm overall posture as a metric