Dashboard Overview
The dashboard is the landing view of the Cert-IX platform at app.cert-ix.com. Rather than being a data source of its own, it is a consolidated, read-oriented summary that rolls up signals from the platform's core surfaces — scans, asset discovery, vulnerability findings, and compliance tracking — into a single view scoped to your organization.
Its job is orientation: give you a fast, accurate answer to "where does my security posture stand right now, and what should I look at next?" From here you branch out into the underlying flows to act on what you see.
What the dashboard summarizes
The dashboard doesn't hold its own copy of your security data. Each panel is a bound view over a real underlying service, so what you see reflects the current state of that service for your tenant. The main summaries are:
| Summary | What it shows | Fed by | Where to act |
|---|---|---|---|
| Security posture score | A single 0–100 rollup of your overall posture | Aggregates vulnerability, asset, and compliance signals | Security Score |
| Vulnerability summary | Open findings grouped by severity (Critical / High / Medium / Low) | Scan results and the CVE-backed vulnerability pipeline | Vulnerability Management |
| Asset health | Coverage across your discovered and connected assets | Scanner agents and asset inventory | Asset Management |
| Compliance status | Progress against the frameworks you're tracking | Compliance tracking (Beta) | Compliance |
| Recent activity | A chronological feed of recent events | Completed scans, new findings, newly discovered assets | — |
Security posture score
The posture score is a single number from 0 to 100, where higher is stronger. It is a derived rollup, not a raw count of problems — the platform weighs the signals it has about your environment (chiefly your open vulnerability findings and their severity, your asset coverage, and your compliance tracking status) and expresses the result as one figure you can watch over time.
As a general reading guide:
| Range | Interpretation |
|---|---|
| 90–100 | Strong posture; maintain and monitor |
| 70–89 | Good; a few improvements outstanding |
| 50–69 | Fair; remediation recommended |
| Below 50 | Weak; prioritize the highest-severity items |
Because it is a rollup, the score moves when the underlying data moves — for example, when a scan closes out High-severity findings or when new assets are discovered. For the full breakdown of what contributes to the score and how to improve it, see the Security Score page.
Vulnerability summary
This panel groups your currently open findings by severity so the most urgent work is obvious at a glance. The counts are drawn from the same vulnerability pipeline that powers detailed triage, so a Critical shown here is the Critical you'll find (with its CVE reference and remediation guidance) when you drill in. To work through findings, prioritize them, and track them to closure, continue to Vulnerability Management.
Asset health
Asset health reflects the inventory the platform has built for your organization — devices, network assets, software, and connected cloud resources. Coverage is populated by the Cert-IX scanner agents you deploy inside your network (Bitcollector for asset telemetry, Bitscanner for vulnerability scanning, Bitmapper for network topology) alongside any assets you add or connect directly. To review the inventory or expand coverage, see Asset Management and Scanner Agents.
Compliance status
Compliance is a Beta capability and is still rolling out. Treat its dashboard summaries as a work-in-progress view of framework tracking rather than a finished GRC report.
This panel shows your progress against the frameworks you're tracking — such as NIST CSF, ISO 27001, SOC 2, CIS Controls, and NIS2, plus any custom frameworks you define. It is a snapshot of tracked state, updated as evidence and control status change. See Compliance for the full capability.
Recent activity
A chronological feed surfaces recent, meaningful events in your tenant — scans that have completed, findings that have appeared, and assets that have been newly discovered — so returning users can quickly see what changed since they last looked.
How current is the data?
Different summaries refresh on different rhythms because they come from different systems:
- Asset telemetry is near-real-time. Scanner agents stream what they observe on your network to the platform continuously, so newly discovered devices and changes appear shortly after the agent reports them.
- Scan-driven data updates as scans finish. Scans run asynchronously through their lifecycle (queued → running → completed). New vulnerability findings — and the score and summaries that depend on them — reflect a scan once it completes, not while it is still running.
- Compliance is tracked state. Framework progress reflects the evidence and control status recorded for your organization, updating as that state changes.
Because the dashboard aggregates several services, a change you make (for example, launching a scan) is reflected once the underlying flow reaches the relevant stage — not instantly across every panel.
How visibility is scoped
Cert-IX is a multi-tenant SaaS platform, and the dashboard is always scoped to your organization. You never see another tenant's assets, findings, or scores.
Within your organization, what each person sees is governed by role-based access control (RBAC): the panels and detail a user can open depend on the permissions their role grants. The breadth of capability available to your organization also depends on your plan (Free, Starter, or Pro).
Jump to key workflows
The dashboard is a springboard into the flows where you actually do the work. Common next steps:
- Run a scan — launch a new assessment with the Scan API. See Getting Started and Submitting Scans.
- Review vulnerabilities — triage and remediate open findings in Vulnerability Management.
- Expand asset coverage — deploy or configure agents in Scanner Agents.
- Check compliance — review framework progress in Compliance.
Customizing your view
The dashboard's layout is adjustable so you can foreground what matters for your role — arranging, showing, or hiding the available panels. Your layout is saved and persists for your account, so your view is waiting for you the next time you sign in. For the full set of available widgets and how to configure them, see Dashboard Widgets.
Not sure where a number comes from or where to go next? Bobby, the Cert-IX AI assistant (bottom-right of the interface), answers questions in natural language and links you to the relevant documentation.
Learn more
- Security Score — how the posture score is composed and improved.
- Dashboard Widgets — the panels available and how to arrange them.
- Vulnerability Management — triage and remediate the findings summarized here.
- Asset Management — the inventory behind the asset health summary.
Questa pagina ti è stata utile?