Security posture
Everything internet-facing · advisories re-checked daily against OSV, CISA KEV and EPSS · last run
P1 · 2-day SLA
Known exploited or critical + likely
P2 · 7-day SLA
Critical, or high + likely
Overdue
Past SLA, still open
In CISA KEV
Exploited in the wild
New alerts
high or critical
Blind spots
of assets lack a fresh SBOM
Patch now
| Priority | Asset | Package | Upgrade | Advisories | Due |
|---|---|---|---|---|---|
| KEV | → | ||||
| Nothing urgent — no P1/P2 or overdue findings. | |||||
Blind spots
No SBOM in the last 7 days. Absence of findings here means "unknown", not "clean".
One row per package bump. The target is the smallest version that clears every open advisory on that package. Showing findings.
| Priority | Asset | Package | Upgrade | Advisories | Due |
|---|---|---|---|---|---|
| KEV |
|
→ | |||
| No findings match. | |||||
| Priority | Advisory | Asset | Package | Severity | |||
|---|---|---|---|---|---|---|---|
| KEV |
Accepted by until :
|
||||||
| No findings match. | |||||||
| Asset | Kind | P1 | P2 | P3 | P4 | Components | Last SBOM |
|---|---|---|---|---|---|---|---|
| Severity | Alert | Source | Account | When | |
|---|---|---|---|---|---|
| No new alerts. | |||||