Analytics¶

Audience: All client users · Where: Analytics in the left sidebar (/analytics).

Overview¶

Analytics is where you slice your organization's findings data to answer questions like "are we trending better or worse?", "are we fixing things fast enough?", "which assets are worst?", "which projects carry the most risk?", and "what keeps coming back?". It's organized into three tabs across the top:

Overview · Outcomes · Breakdowns

Breakdowns is a group: selecting it shows a second row with By Asset, Projects, and Recurring Issues.

Read-only

Like the Dashboard, Analytics is read-only and scoped to the data you have access to.

The tabs¶

OverviewOutcomesBreakdowns → By AssetBreakdowns → ProjectsBreakdowns → Recurring Issues

The landing tab. Headline tiles show Total Findings, Security Score (with its change vs last month), Awaiting Retest, and Open Critical Findings. Below:

Open Findings by Severity: the full Critical/High/Medium/Low/Info breakdown with bars.
Findings by Status: how your findings split across their statuses (see Statuses).
Most Common Vulnerability Categories: a bar chart of your most frequent issue types.
Recurring Findings: a preview of issues that appear in more than one engagement.

A Trends section at the bottom has its own time-range picker (3 / 6 / 12 / 24 months) that applies to both of its charts:

Vulnerability Count per Month: a stacked bar chart of findings discovered each month, colored by severity. Toggle severities on and off.
Average Time to Fix: how long remediation takes on average (shows "No remediation data available yet" until fixes have been recorded).

How well your organization is remediating, rather than just what was found: opened vs. closed findings, exposure over time, SLA compliance, time to remediate, retest results, and test coverage over a period you choose, with an optional comparison to the previous period. This is also where you generate the Executive summary PDF.

See Outcomes & Executive Summary for every card.

A sortable table of every asset with its Type, finding counts per severity (Crit / High / Medium / Low / Info) and a Total column. Filter by License or use Search assets… to narrow the list. This is the fastest way to spot which specific hosts or applications are driving your risk.

Open findings per project: the same severity breakdown, grouped by assessment/project instead of by asset. Filter by Type, use Search projects…, and page through results. Use it to compare engagements and see which one needs attention first.

Findings that show up in multiple projects, often a sign of a systemic problem rather than a one-off. The table lists each recurring finding with its Severity, Category, number of Occurrences, how many Projects it spans, and the time Span between first and last sighting. Filter by severity or use Search by title or category…. Two charts below summarize Recurring by Category and the Severity Distribution of Recurring Issues.

Working with the tables

Every Analytics table supports column sorting, a column-visibility toggle, rows-per-page, and Export CSV (the CSV includes extra columns such as license, and first/last seen for recurring issues).

Looking for History?

The former Summary and History tabs were merged into Overview. Old links to /analytics/history take you there.

Tips¶

Tip

Security Score is a single indicator of overall posture; watch its month-over-month trend more than its absolute value.
Use By Asset and Projects together: By Asset tells you what to fix, Projects tells you where it lives.
Recurring Issues is the best place to find quick, high-leverage wins: fixing one root cause often clears the same finding across several engagements.
Reporting upward? Outcomes and its executive summary PDF are built for that audience.