Overview
The Dashboard brings together current security risk and Backline remediation activity. Use it to understand whether exposure is trending up or down, see which items need action, and drill into the applications, vulnerabilities, and remediations behind the numbers.At a glance
- Worth your attention highlights work that needs action, such as pending approvals, items waiting for input, and items nearing an SLA deadline.
- Resolved by Backline summarizes vulnerabilities Backline resolved and the time and effort associated with that work.
- Exposure over time shows how your organization’s Exposure Score changes.
- Open items radar shows open remediations or vulnerabilities by SLA urgency and category.
- Risk analysis shows how the active vulnerability set narrows through exploitability, reachability, fixability, and approval.
- Top risky applications and Remediations pending approval by team help you see where risk and review work are concentrated.
Worth your attention
This card brings together counts of work that may need a person’s attention:- Remediations pending approval: Open remediations waiting for approval. The card also shows the estimated reduction in Exposure Score if all pending fixes are approved.
- Remediations pending action: Open remediations waiting for information or another action.
- Vulnerabilities pending action: Open vulnerabilities waiting for an action, such as completing a required mapping.
- About to breach SLA: Open items nearing their SLA due date.
- Critical vulnerabilities: Open vulnerabilities in the Critical risk band.
Resolved by Backline
This widget summarizes vulnerabilities resolved through Backline Auto and Hybrid remediations for the selected period. Hybrid remediations include fixes that required a manual step. Use the date selector to view the last 30 days. The headline percentage shows Backline-resolved vulnerabilities as a share of the backlog during that period. The bar shows the split between Auto and Hybrid resolutions. The widget also reports:- MTTR: Median time from first detection to resolution.
- Agent time to fix: Average time from assignment to opening a fix.
- Time saved: Estimated engineering time saved by Backline, using Backline’s standard time-saved calculation.
Exposure over time
The chart shows a daily snapshot of your Exposure Score for the selected period. The Exposure Score is a 0–100 view of overall exposure; a lower score means less exposure. It averages the risk of open vulnerabilities across applications and weights each application by its business criticality. Vulnerabilities that are not linked to an application are grouped by repository. Applications without a business-criticality label use the Standard weighting. For more on vulnerability risk, see Risk Score. Below the chart:- Exposure score shows the most recent score.
- Score if all fixes approved estimates the score if the vulnerabilities covered by pending-approval remediations were resolved. It is an estimate, not a record of completed fixes. If no fixes are pending approval, the widget says No pending fixes.
- Critical risk vulnerabilities shows the number of open vulnerabilities in the Critical risk-score band. Select the count to view those vulnerabilities.
The trend appears after Backline has collected at least two daily snapshots. Until then, the chart indicates that data is being collected.
Open items radar
The radar has two tabs: Remediations and Vulnerabilities. Each dot represents an open item. Its distance from the center shows how close it is to its SLA deadline: overdue items are closest to the center, followed by items due within 1 week, and 1 month. Items due later appear farther out. Use View by to group the radar by Type. Types include SCA, Image Container, Host, and Cloud Misconfiguration.Remediations tab
Dot color shows the remediation mode (Auto or Hybrid), and dot size represents remediation impact. The legend shows the count for each mode.Vulnerabilities tab
Dot color shows the vulnerability’s risk-score band (Critical, High, Medium, or Low). All dots are the same size, and the legend shows the count in each band.The total count and legend counts include all open items. When there are more than 250 open items, the radar plots up to 250 while keeping the displayed totals complete.
Risk analysis
The funnel shows how active vulnerabilities pass through successive risk and remediation stages. Each stage is a subset of the stage before it, and each is broken down by vulnerability severity. The percentage below a stage shows the reduction from the previous stage.- Total: All open vulnerabilities.
- Exploitable: Open vulnerabilities marked exploitable or uncertain. Only those confirmed not exploitable are excluded.
- Reachable: Open and exploitable vulnerabilities marked reachable or uncertain. Only those confirmed not reachable are excluded.
- Fixable: Vulnerabilities that are not marked No fix available. This includes vulnerabilities with an Assisted Fix path.
- Pending approval: Vulnerabilities covered by an open pull request awaiting approval. Assisted Fix remediations without an open pull request are not included.