Application Security Posture

The Application Status page displays the security status of the applications at each individual level. The risk status and the current deployments of the application are displayed to get a detailed view.

You can choose the environment for which you want the details to be displayed.

The upper section displays the application risk summary:

• Risk Status : The current risk status of the application is displayed, namely; Low, Medium or High.

• Supply chain stages and Security Score : The security score of the application in each stages of the software supply chain namely Source, Build, Artifact and Deploy is displayed.

• DBOM and Smart Diff: The View DBOM and Smart Diff options for the application is displayed. On clicking it, detailed summary page of DBOM or Smart Diff is displayed.

The following three panels are displayed below, providing information about the Services connected to the application, and the Vulnerabilities and Alerts identified in the application.

• Services : The services panel displays the number of services connected to the application.

• Vulnerabilities : This panel displays the total number of vulnerabilities identified in the application. The color code notifies whether the vulnerability is Critical, High, Moderate or Normal. On clicking the panel, the Vulnerability Management page is displayed that gives more details about the vulnerabilities.

• Alerts : This panel displays the total number of alerts identified in the application. The color code notifies whether the alert is Critical, High, Moderate or Normal. On clicking the panel, the View Open Security Issue page is displayed that gives more details about the alerts.

The current deployments section is displayed at the bottom. Refer View Current Deployments for more details.

Smart Search

The smart search option available in this page, helps you to search for a deployment based on the component or vulnerability related to it.

Select Component or Vulnerability from the search dropdown and enter the name. Press Enter. The services with the given component or vulnerability are displayed.