Rolling Recap Dashboard

The Apps Scanned section shows the total number of applications scanned and the number of vulnerabilities detected by Sonatype Lifecycle during the year. You can view the total no. of vulnerabilities detected by Lifecycle and an average breakdown of vulnerabilities per application. The industry average comparison will give you an idea of your vulnerability profile as compared to your peers.

The Risk Composition chart highlights the volume of critical vulnerabilities (CVSS scores >=8) as compared to other vulnerabilities. This helps you plan or expedite efforts to remediate the critical vulnerabilities.

This section shows the volume and variety (ecosystems) of components analyzed in the last 365 days. It indicates the thoroughness of scans carried out by your installation of Sonatype Lifecycle. The industry comparison provides awareness of similar efforts by your peers.

This section shows the top 5 CVEs (Common Vulnerabilities and Exposures) that were fixed. Vulnerabilities include publicly disclosed vulnerabilities in the NVD (National Vulnerability Database) and Sonatype-discovered vulnerabilities. The graph displayed in this section indicates the magnitude of impact Sonatype Lifecycle has on securing your DevSecOps pipelines.

This displays the variety of programming languages, frameworks, databases, front-end tools, back-end tools, and applications connected by APIs, platforms, etc. that are currently used in your DevSecOps pipelines. The higher the tech stack diversity, the higher the security risk, dependency management, and integration efforts. Data presented here can be used to reduce these risks by standardizing your technology stack. A standardized technology stack is also conducive to more code reuse and collaboration across different teams in your organization.