• Public

Analytics Group

Skip Feed
  1. Pinned Post

    Anne N (Veracode PM) (Veracode)

    January 7, 2019 at 4:55 PM

    Welcome to the Veracode Analytics Group!

    As of Jan 7th, the new analytics functionality is generally available enabling you to explore your application security data, build visualizations and better understand the effectiveness of your application security program.

    With this group, we will share updates on the new Analytics service, answer questions, and listen to your feedback. Look for announcements from Veracode about new features, feedback on your requests, and notes from other practitioners.

    The only rule of the discussion is to please be careful to avoid sharing screenshots containing sensitive data.

     

    Expand Post

  2. JRaman655537 (Community Member)

    March 31, 2022 at 1:31 PM

    Hi,

     

    I would like to generate monthly graph report to show

     

    1. How many total flaws were opened/open for the last 6 months (exclude the approved mitigation items)
    2. How many items were opened/open in very high, high, medium, low for the last 6 months (exclude the approved mitigation items)

     

    can you explain how to do this. Thanks!

     

    Something similar to below image

     

    monthly report

    Expand Post
    • 1 comment
    • 432 views
    nhen_avx likes this.

    • nhen_avx (Community Member)

      +1 I'd like to show how many flaws are open month-over-month as well, ideally by severity. The idea is to show the progress we are making on backlog of issues over time.

  3. Shony (Community Member) asked a question.

    February 18, 2021 at 4:09 PM
    How long does the analytics take to update?

    Example: I approve a mitigation on App A, how long before I query App A and the mitigation logs as closed in the analytics?

    • 1 answer
    • 252 views

  4. Shony (Community Member) asked a question.

    February 11, 2021 at 9:52 PM
    How would I create a trendline to show when flaws are closed?

    For example, I would prefer to have a total flaws found along with total closed and total open, with points at least once a week. I see that you can get a count of items that have been resolved before a certain date, but I can't figure out how to create a table with weekly dates.

    • 1 answer
    • 298 views

    • Jason M., Veracode Support (Veracode)

      Hello @Shony (Community Member)​ ,

       

      You can get a current moment “total found/open/closed” through the “Findings Explore”.

       

      For trending over time (number closed in X week, number opened in X week, etc.), the Scans Explore would be your best bet to see what opening and closing activity is taking place over time across scans.

       

      The explores are found in:

      Analytics > Explore your data

       

      Also, you can always look for and suggest future enhancements to Veracode by going to the Idea (Product Feedback) [https://community.veracode.com/s/ideas] section in the community if that isn't exactly what you are looking for.

       

      Jason

      Veracode Support Engineer

      Expand Post

  5. Product Announcements — Tim J (Veracode PM) (Veracode) asked a question.

    Edited by Shuning, Veracode Community Manager February 11, 2021 at 10:10 PM
    🎯New Analytics Features: Security Program Dashboard and Static Flaw Details

    Hi all, wanted to provide a little more information about two new Analytics features that we announced today.

     

    The Security Program Overview dashboard was designed based on input from customers and Veracode security program managers to highlight important statistics in your application security program. And — based on a frequent request — it also incorporates targets!

     

    When viewing the dashboard, you can set targets for key metrics like policy compliance, API usage, flaws fixed, and scan coverage. You'll also get richer statistics on time to fix, months in compliance and days since last scan. Check out a preview of the dashboard below!

     

    analytics-securityprogram 

    Second, for folks that are building their own dashboards and reports, we'd like to note the ability of static flaw details in the Findings explore. This set of data dimensions includes details of the finding location, like the source file, line number, function in which the finding occurred, the actual function call where the flaw was found (aka the "sink"), and more. You can use these dimensions to produce tabular reports, identify applications that share findings in a common source file, and more.

     

    Please leave a comment if you have questions about these features!

     

    @Analytics Group​ 

    Expand Post
    • 3 answers
    • 736 views
    KP7766, lucas.ferreira, and 2 others like this.
    1 of 3

    • Anne N (Veracode PM) (Veracode)

      Unfortunately, assigning specific colors to the Pass, Fail, Conditional Pass, Not Assessed values is not possible with the timeline visualization. The colors as assigned based on the order of the data, as you discovered. There is no way around this unfortunately and that is why we had to go with the Veracode color palette rather than the usual colors (green, red, yellow, grey) for these values. We have provided this feedback to the provider of the functionality that we white label to provide the analytics capability and we are hoping that this will be a future improvement.

      Expand Post

  6. Product Announcements — Shuning, Veracode Community Manager (Veracode) asked a question.

    February 11, 2021 at 4:45 PM
    🚩Weekly Product Update (02.11.21): Analytics and Azure, plus More Static Support

    Here's your summary of the latest and greatest Veracode features:

     

    #Veracode Platform​ 

    • New Static Analysis Findings Information in Veracode Analytics - more details about findings that relate to your Static Analysis scans, including the function name, class path, and most recent line number in which Veracode discovers the findings. This data enables you to recreate a similar view as the Triage Flaw view in the Veracode Platform, but across multiple application profiles. 
    • New Security Program Overview Dashboard in Veracode Analytics - a new dashboard that contains data to help you track and understand how your AppSec program is trending, based on your target goals. With this dashboard, you can see current and historical trends for policy compliance, as well as better understand policy compliance behavior. New information available to you includes details such as how an application is meeting compliance over time. 

     

    #Azure DevOps​ 

    Veracode Azure DevOps Extension version 3.4.0 includes these updates: 

    • Use YAML to add Veracode analysis to build pipelines. 
    • Use YAML to import findings as work items into Azure DevOps. 
    • Include mitigation and annotation comments when importing new findings as work items. 
    • Set a timeout to fail a build if Veracode analysis does not complete within a specified time

     

    #Veracode Static Analysis​ 

    • New Veracode Static Analysis Support for GCC 9, Koa.js, Hibernate Framework, and Autofac Framework 
    • Improved Veracode Static Analysis Results for Android, PHP, and Python Applications 
    • Improved Prescan Warning Messages 
    • Improved Results Consistency for Java Applications 
    • Improved Results Accuracy Within JSP Files 

     

    @Integrations Group​ @Analytics Group​ 

    Expand Post
    • 373 views
    eric likes this.

  7. Anne N (Veracode PM) (Veracode) shared a post.

    September 29, 2020 at 7:04 PM

    I posted details about how to share a link to a dashboard in the Product Announcements group - check it out!

    Shared Post

    Product Announcements — Anne N (Veracode PM) (Veracode) asked a question.

    September 29, 2020 at 7:02 PM
    Share a Link to your Analytics Dashboard 📈

    Analytics users can now share a link to a specific dashboard including both Veracode Dashboards and My Organization Dashboards that are shared within the account. This makes navigating and sharing analytics information across your organization much easier!

     

    Dashboard links require the user to login to access the data and will provide information based on the data visibility and role of the user. 

     

    share a dashboard

    learn more here: https://help.veracode.com/reader/~ru~DM7zLR70E4gsW6e5MQ/nfMv9TolqXrYcWdEQj3Efw

    View Original Post
    • 882 views
    • 499 views
    dlawson likes this.

  8. Alextor (Community Member) asked a question.

    September 20, 2020 at 2:13 PM
    Are there Analytics APIs available?

    Are there APIs available for Analytics Dashboards? For example on a periodic basis I want to download csv files from reports contained in multiple dashboards. Ideally I would want the request to trigger a "run" of the report, and allow me to specify "filter parameters" when I run them.

    • 3 answers
    • 369 views
    1 of 3

    • JohnMarcotte_Fidelity (Community Member)

      Hi - I see it's been a bit over a year since this thread was active. Any updates on if/when we might see an API to gather analytics so we don't have to do downloads manually from the analytics dashboard?

End of Feed
8 Chatter Feed Items

Group Details

Details

Description
Information and discussion about the new Veracode Analytics feature now available.
Show More
Information
Owner
Tim J (Veracode PM)