Start with these Four Pre-built Dashboards
Why Use a Dashboard?
The most successful AppSec programs start with clear goals. The dashboards in Veracode Analytics allow you to track progress against your goals and make data-driven decisions as you develop, grow, and mature your program.
Get Started With a Pre-Built Dashboard
Don’t have time to build your own dashboard? There are a few pre-built dashboards to get you up and running in seconds. To get started, log into your Veracode Platform (https://web.analysiscenter.veracode.com), and navigate to the Analytics tab → Veracode Dashboards.
Dashboard 1: Policy Compliance Overview
This dashboard is especially helpful for organizations that need to be compliant with a specific policy. The analytics will focus on what flaws are open relating to policy, how often scans are performed, etc.
This dashboard will show:
- Number of applications passing policy in your portfolio
- Applications passing policy by team
- How compliant applications are over time
Dashboard 2: Findings Detail
This dashboard focuses on analytics relating to security debt (a more granular look at flaws). For example, which flaw categories are persisting, which specific flaw IDs are persisting, where can execs focus education?
This dashboard will show:
- Percent of open and closed findings impacting policy
- Most common flaw categories
- Top open and closed CWEs
Dashboard 3: SCA Findings
This dashboard gives you visibility into third party-related vulnerabilities and potential licensing risk. This dashboard will show:
- Open source components impacting policy
- Open source components with vulnerabilities
- The severity of open vulnerabilities
- The risk of your licenses
- Open source libraries with the biggest effect on an application
Dashboard 4: IDE Scan Usage
This dashboard tracks the use of the Veracode IDE Scan.
- The “performance-related success” focuses on specific team-based success -- who is scanning, who is introducing new flaws, etc. This metric can help execs focus on time/energy.
- IDE Scan usage
- Scans by language
- Top 10 teams and users for gamification
Get Customized Dashboards
Looking to customize your dashboards? Schedule a call with your Security Program Manager, who will help build the dashboards that meet your specific business needs.
.png)