Products
Create products, set their options, choose the default product and delete products.
Products in the sidebar lists all products, the riskiest first.
Each card shows:
| On the card | What it means |
|---|---|
| WRT to RA | the product’s risk as a share of its risk appetite; above 100% the product carries more risk than you accept (see WRT) |
| Criticality | how much damage an attack on the product would do, from 0 to 100; the higher it is, the more the product’s findings weigh in its risk (see Risk assessment) |
| Resolved, Triaged, Today | the share of findings resolved, triaged, and found today |
| Findings | how many findings the product has |
| SLA violated | how many findings missed an SLA deadline |
Open Filters to filter by product type, tags, business criticality or the default product.
Create a product
Click Create Product and fill in:
- Product name: without spaces or
/, for examplenorthwind-loyalty. - Product Type: pick one or type a new name to create it.
- Product related tags: tags to find and group products by, for example a team or a business unit.
The Task Trackers tab of the product’s Options changes how tasks for this product are created, for example in another project. See Task trackers.
Products are also created by imports: an import that names a product and product type that don’t exist yet creates them. See Import scan results.
A product’s page
Click a product to open it. Its page shows its risk trend and findings charts and its business criticality. The sidebar opens the rest of the product:
| Page | What’s there |
|---|---|
| Findings | the product’s findings, with the same filters and actions as all findings |
| Assets | the product’s assets |
| Finding Groups | finding groups |
| Audits | audits of the product’s assets |
| Risk Assessment | the questionnaire that sets the business criticality |
| Options | name, type, tags, default product, task tracker settings, manual deduplication, and deleting the product |
The buttons at the top create a finding, import a scan result, build a report or run an audit for this product.
Default product
An import that doesn’t say which product it’s for goes to the default product. This happens when a scan result names an asset that isn’t in any product yet: the asset is added to the default product, and its findings go there.
Portal creates the default product, Unsorted, on install. Repositories pushed to for the first time, repositories imported from version control and new container images also start there.
To make another product the default, open its Options and turn on Use as default product. There’s only one default product: turning it on moves it from the previous one.
Check the default product regularly and move its assets to the products they belong to (see Move an asset to another product).
Delete a product
Open the product’s Options and click Delete Product, or use Delete in the product’s menu in the list. The product is deleted in the background, with its assets and findings.