Table of Contents

Vulnerability Assessment[VA]

Author Updated by Author

This tab displays various reports of Vulnerability Assessment scans from Top Threats Identified During Last Scan to Threats Identified During Last 5 Days in the form of various graphs.

List of IP Address registered with Vulnerability Assessment is displayed with Scan Status. This widget is displayed for All Sites only.

Scan Status

Click Scan Status button to view the scans and services that are active or inactive. Scan Status pop-up appears.

The Scanned Websites with Vulnerabilities Found, Status of the scan and Action column is displayed.

Parameter

Description

URL

The URL of the scanned websites is displayed in this column.

Vulnerability Found

The count of the vulnerabilities found from an application is displayed in this column.

Click Download CSV link to display the data in the respective format.

Status

This column displays if a scan service is Inactive or In progress.

Action

This column displays Start button for active services and Pause and Stop button for in progress scans.

Web Applications

By default, scan details of All Sites is displayed for VA page. There are 2 other options i.e., In Site(s) and In Group(s).

In Group(s)

Click Web Applications drop-down and click In Group(s) option to display the existing groups subscribed with VA scans. Select Group drop-down appears.

Click Select Group drop-down, click to select a specific group. VA page of the selected group is displayed.

If the selected group is not subscribed for Vulnerability Assessment service, Dashboard page appears.


[OR]

List of IP Address in the group and various other VA scan reports of the selected group are displayed.

List of URLs 

This widget displays the Website URLs registered for Vulnerability Assessment scan and their Scan Status.

Scan Status is displayed  , if your Vulnerability Assessment[VA] has passed last Indusface WAS Security Scan. It does not have any critical alert.

Scan Status is displayed  , if Indusface WAS security scan is running or not yet started your VA service.

Scan Status is displayed  , if there is one or more critical alert found in last VA scan.

In Site(s)

This option helps a user to display a specific site from the websites registered with VA scans.

Click Web Applications drop-down, click In Site(s) option. Select Asset option displays.

Click Select Asset drop-down, click to select any one of the existing assets. The VA scan details of the selected assets are displayed.

The VA scan details of a specific asset with general information of an asset are displayed. Customer Asset ID is displayed if created otherwise N/A(nil) is displayed.

Customer Asset ID

Click edit customer asset ID option to create or update a short name for an Asset. Edit Customer Asset ID pop-up appears.

Click Customer Asset ID box, enter an unique ID and click Submit button. The updated ID is displayed.

General Info

This displays the basic information of a website or the selected Asset like IP Address, Last Scan, Remaining POC etc.

Open Services Found in Last Scan

The ports that are open during the last scan on the scanned IP address are displayed in this option. Open service details like Protocol, Port, Service Name, and Product Name are displayed.

Scan Summary

This option displays the scan details like Scan Date, Vulnerability Type, Total Vulnerabilities, and Seal Status.

Click PDF or Excel icon in Downloads option to download the report of a specific scan.

Threats Identified During Last Scan

his widget displays the threats found in last scan as Critical, High, Medium, and Low according to severity in the form of a pie chart.

Click  to download the report in CSV format.

Open Status Identified During Last Successful Scan

Three kinds of open statuses are available with a unique colour i.e., Re-open, Open, and New.

The number of vulnerabilities found in a specific status is displayed in the pie-chart. Mouse over a specific status in the pie chart to view the percentage.

Aging Summary

This option displays the vulnerabilities open for last 30 (or) 90 (or) 180 days. An application is vulnerable even after re-validation cycle.

Parameter

Description

Label

This option displays the number of days a vulnerability is open for ageing summary.

Critical

This option displays the number of critical vulnerabilities open for the respective days.

High

This option displays the number of high vulnerabilities open for the respective days.

Medium

This option displays the number of medium vulnerabilities open for the respective days.

Click the number in respective vulnerability category (i.e., critical, high or medium) to view the further details. Vulnerability Assessment Details pop-up appears.

The Unique Alert ID, URL, Title of the vulnerability, and Severity of the open vulnerabilities is displayed. The general Description and Solution is displayed on the side.

Click Show More button of a specific open vulnerability to view further details like IP address, references, etc.

How did we do?

Application Audit[AA]

Reports

Contact

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.