Executive View
Security Factor Score

58

Portfolio average

Applications

6

Under protection

Open findings

87

26 Critical

Active Solutions

2

Business groupings

Solutions Posture (worst first)

Solution Name Apps Min Score Critical Criticality
Contoso Commerce Platform 3
51
12
BusinessCritical
Internal Platform Services 3
56
14
Standard

Open Findings by Severity

Top Critical Findings (open)

View All
Title Application CWE Detected
pickle.load() used on untrusted model file DataPipeline ML Service CWE-502 2026-05-31
User input directly concatenated to LLM prompt DataPipeline ML Service CWE-77 2026-05-31
AWS Access Key exposed in configuration file LegacyPayments Java CWE-798 2026-05-30
AWS Access Key exposed in configuration file InfraManager Go Service CWE-798 2026-05-30
AWS Access Key exposed in configuration file CustomerPortal React CWE-798 2026-05-30
AWS Access Key exposed in configuration file DataPipeline ML Service CWE-798 2026-05-30
AWS Access Key exposed in configuration file FinanceHub Portal CWE-798 2026-05-30
AWS Access Key exposed in configuration file Contoso eCommerce API CWE-798 2026-05-30
SQL Injection in user search query LegacyPayments Java CWE-89 2026-05-27
Reflected XSS in error message display LegacyPayments Java CWE-79 2026-05-27

Compliance Posture

OWASP Top 10 (2021) 100%
PCI DSS v4.0 100%
HIPAA Security Rule 100%
OWASP Top 10 for LLM Applications 100%
MITRE ATLAS 100%
Wireless Security Baseline 100%
EU Cyber Resilience Act 100%

Recent Scan Activity

IaC — LegacyPayments Java

2026-06-01 15:02 · 0 findings · User

Full — CustomerPortal React

2026-06-01 11:02 · 17 findings · Schedule

Secrets — DataPipeline ML Service

2026-06-01 10:02 · 0 findings · User

SCA — InfraManager Go Service

2026-06-01 08:02 · 0 findings · User

SAST — Contoso eCommerce API

2026-06-01 08:02 · 7 findings · User

Config — FinanceHub Portal

2026-06-01 07:02 · 0 findings · User

SCA — Contoso eCommerce API

2026-06-01 07:02 · 0 findings · User

SAST — DataPipeline ML Service

2026-06-01 06:02 · 7 findings · User

IaC — CustomerPortal React

2026-06-01 03:02 · 0 findings · User

IaC — Contoso eCommerce API

2026-06-01 02:02 · 0 findings · User
🛡️ Security AI