AppSec Atlas | Application Security Posture Management

Access

Sign in to continue

Choose an enabled sign-in option.

GitHub Enterprise Checking configuration Google SSO Checking configuration Test user Checking configuration

Executive overview

Dashboard

Risk, coverage, remediation pressure, and scanner operations across your application estate.

Loading

Risk distribution

All normalized findings by severity and workflow state.

No findings imported

Priority applications

Assets with the highest active risk.

No application risk is available.

Scanner operations

Latest completed or failed scanner operation and asset coverage.

Import scanner results to establish tool coverage.

Remediation queue

Security findings

One deduplicated workflow across SAST, SCA, secrets, IaC, DAST, and custom tools.

Risk	Finding	Application	Correlation	Branch responsibility	Severity	Status	Tool	Due
Loading security findings.

Rows per page Page 1 Loading findings

Contextual risk

Asset risk profiles

Technical findings prioritized by exposure, business criticality, and observed data interactions.

Risk	Application	Repository	Active findings	Data sensitivity	Data interactions	Context
Loading asset risk profiles.

Rows per page Page 1Loading assets

Control assurance

Scanner coverage

Find applications that are untested, stale, or missing expected security controls.

Current0Scanned within 30 days

Stale031 to 90 days

Untested0Never or older than 90 days

Coverage0%Current application coverage

Application	Repository	Branch	Types	Tools	Last scan	Coverage
Loading scanner coverage.

Page 1 Loading assets

Service configuration

Configuration

Checking

Database connection

PostgreSQL storage for scans, inventory, findings, and schedules.

Checking

Sync scan results Private to your signed-in account

Checking connection application_inventory

HostDefault: localhost PortDefault: 5432 DatabaseDefault: postgres UserDefault: postgres PasswordDefault: postgres SchemaDefault: application_inventory Compatibility tableDefault: application_inventory_assets

GitHub App connection

Checking GitHub App configuration.

Checking

Remediation timelines

An active finding is overdue after its due date passes. Policy changes recalculate policy-managed due dates; manually set dates are retained.

CriticalDays to remediate HighDays to remediate MediumDays to remediate LowDays to remediate InformationalDays to remediate

Loading remediation timelines.

Scanner connections

Security scanner integrations for this account.

Checking scanner configuration.

Webhooks

Delivery destinations for complete inventory scan records.

Name Endpoint URL Delivery mode Bearer token Optional Signing secret Optional Batch size EnabledDeliver this account's scan records

Advanced deliveryHeaders, retries, timeout

Headers Optional Retries Timeout seconds

No webhook selected.

Application inventory

Inventory records

Loading your inventory

Private to your account

Local AI inventory assistant Private and running on this machine

Checking local model

Quick filters

Search inventory


			Any language No languages detected					Any type Mobile app Web app API service Microservice Middleware Serverless Library Infrastructure AI-enabled ML-enabled
Loading inventory records.

Rows per page Page 1 Loading records

Status Idle

Assets 0

Runtime 0s

Active scan

No scan selected

application-inventory-service

Runs

0

Console

Failures

0