Understand Dashboard Metrics
Why Metrics Matter
Optimize Security Posture: Gain complete visibility into your application security health, including vulnerabilities, scan coverage, and resolution SLAs, to proactively manage risk.
Enable Data-Driven Security Management: Empower DevSecOps, engineering, and executive teams to track trends in vulnerability management, scan effectiveness, and remediation performance over time.
Spot High-Risk Areas: Identify which apps, teams, or stages of your pipeline are generating the most critical vulnerabilities or failing to meet SLAs—so you can intervene early.
How to Measure the Metrics
1. Overall Issues
Breakdown of vulnerabilities by severity:
Critical: Immediate threat – urgent action required.
High: Significant risk – prioritize soon.
Medium: Moderate impact – address in due time.
Low: Minor issues – low priority.
2. Detailed Vulnerability Reports
View by Container Scans and Security Scans:
Includes: Project, Branch, Repo, Severity, Status, AI-generated Summary (Impact, Remediation, Action Plan).
3. Vulnerable Components
Current & Prior:
List of active and previously identified vulnerabilities per component.
AI Summary:
For each component: Risk impact, fix recommendation, and next steps.
4. Resolved Vulnerable Components
Trend chart showing resolved issues over time.
Clickable view for resolved component details.
5. New Vulnerable Components
Trend chart for newly discovered vulnerabilities.
Shows count change (%) with up/down arrows.
6. Top Vulnerable Components
Top 5 components with the most issues.
Includes: Title, Severity, Date Identified, and Detail Links.
7. Compare Vulnerabilities
Top Applications with Issues:
Severity distribution across selected apps.
Top Authors with Issues:
Issue count by author, broken down by severity.
Example (Last 30 Days)
Total Vulnerabilities: 1,380
Critical: 56
High: 234
Scan Coverage: 84%
SLA Breaches: 79
MTTR (Critical): 12.3 days
Open vs. Closed Trend: +8% improvement
Top Vulnerable Repo:
sample-auth-service
How Opsera Helps
Real-Time Security Insights Dashboards update as new scan data is ingested from integrated tools like SonarQube, and Aqua.
Flexible Filters View security posture by app, repo, team, tool, or vulnerability type to get focused insights.
Drill-Down Capability Click into metrics to view exact vulnerabilities, impacted files, or scan logs for investigation.
Actionable Risk Indicators Color-coded trends and widgets highlight risk hotspots and track progress against remediation goals.
FAQs
How often is this dashboard updated? Dashboards update in near real-time based on tool integrations and pipeline activity.
Can I filter by team or repository? Yes—filters are available for app, team, tool, and vulnerability type.
What counts as a breach of SLA? A vulnerability not resolved within the configured threshold (e.g., Critical: 7 days).
Last updated