Dashboard¶
The Dashboard aggregates the results of a project into figures and charts. It is the recommended starting point for a periodic review, and the fastest way to see whether the exposure of a project has changed.
Key figures¶
Three counters are shown at the top of the view:
| Figure | Meaning |
|---|---|
| IP addresses | The number of IP addresses confirmed as assets. |
| FQDNs | The number of fully qualified domain names confirmed as assets. |
| Services | The number of individual services confirmed as assets. |
Selecting a period¶
The control at the top right of the chart area switches the presentation:
| Selection | Presentation |
|---|---|
| Distribution | The current distribution across the categories of each chart. |
| 1 month, 2 months, 12 months | The development over the selected period. |
Use Distribution to answer what is the situation now, and a period to answer what has changed.
Charts¶
| Chart | Content |
|---|---|
| Vulnerabilities | The distribution of vulnerabilities by severity: Critical, High, Medium, Low, Informational. |
| Services with vulnerabilities | The proportion of affected against unaffected services. |
| IPs with Vulnerabilities | The proportion of affected against unaffected IP addresses. |
Map and location services¶
Below the charts, a world map plots the geographic location of the identified systems. The Location services panel beside it lists the hosting locations that have been determined. Use the plus and minus controls to zoom.
The geographic location is derived from the address registration and does not necessarily correspond to the physical location of a system.
Technical breakdowns¶
The remainder of the view breaks the attack surface down by technical attribute. Each panel states the number of distinct values in its heading.
| Panel | Content |
|---|---|
| Protocols | The protocols identified across all services, with the number of services for each. |
| Ports | The ports identified across all services, with the number of services for each. |
| Applications | The software identified on the services, listed as Vendor, Product, Version, and Count. |
| Services device categories | The device categories the identified services were assigned to. |
The Applications panel is a table and therefore supports column filters and column selection as described in Working with the interface.
Reading the Applications panel
A single outdated version that appears with a high count usually indicates a systematic issue, such as a template, an image, or an unpatched fleet, and is normally more valuable to address than a single high-severity finding on one host.