# Severity Statistics Dashboard

* [**Current Weighted Risk Trend**](#current-weighted-risk-trend)
* [**Mean Time of Status Change**](#mean-time-of-status-change)
* [**Findings count**](#findings-count)

&#x20;**Severity Statistic view:**

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2F7vwIrdsR8XTQdFqmaswL%2Fimage.png?alt=media&#x26;token=20cdc8e1-cfc6-491a-9a60-73b3971e5207" alt=""><figcaption></figcaption></figure>

You can **customise your dashboard** based on your needs by clicking the **Metrics button** <img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FHfvURpcGJtJzB3fHRK3r%2Fimage.png?alt=media&#x26;token=c6d750cd-3728-472d-9803-03843084d709" alt="" data-size="line">  on the right panel:

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FsdGnhiZlfLBLmMSdig8c%2Fdash1.gif?alt=media&#x26;token=c48ad44d-9811-4ed8-bb46-64505ea1cb02" alt=""><figcaption></figcaption></figure>

The **timeline** of the charts can be customized to show data for the last 3 days, last week, last month, or last year, providing flexibility in analyzing different time ranges.&#x20;

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FuYiP6qDdBWPg6D9xL5HS%2Fimage.png?alt=media&#x26;token=442c101f-f4d6-4830-8f00-1243d2a2b760" alt=""><figcaption></figcaption></figure>

**Select the products** for which you want to see data on the chart by selecting them from the *Products to Select* section. You can search, filter (by product type, included or excluded tag) and include or exclude selected products from the data display by moving the *Exclude Selection* slider.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FD85Z9jxvNJ0BB9QXfzOP%2Fprod%20dashboard.png?alt=media&#x26;token=f8ea429f-0abe-4f9d-9422-804a15e80ec7" alt=""><figcaption></figcaption></figure>

### Current Weighted Risk Trend

[**Weighted Risk Trend (WRT)**](https://docs.whitespots.io/appsec-portal/features/security-metrics/wrt-weighted-risk-trend) metric empowers organizations to measure and track the state of security in a business-oriented manner. The **General WRT** is calculated by combining the WRT of each product, taking into account their respective severity weights, findings count, and business criticality assessments.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FapzHpURBGK4yYOsykBBC%2Fimage.png?alt=media&#x26;token=6811499f-4f38-4729-88f7-533fe3b4772d" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
Note that the **General Weighted Risk Trend** displays the [WRT](https://docs.whitespots.io/appsec-portal/features/security-metrics/wrt-weighted-risk-trend), risk appetite and severity weight values. Be sure to [set the appropriate weights](https://docs.whitespots.io/appsec-portal/features/security-metrics/metrics-settings) before viewing the graph. Otherwise, the graph may be distorted by incorrect weight values.
{% endhint %}

By regulary tracking the following global metrics, you can gain a better understanding of your security posture and make informed decisions to enhance your overall security strategy.

### Severity statistics

Shows the number of verified findings grouped by severity.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FgZvoXrRTtuERDQSK5SyT%2Fimage.png?alt=media&#x26;token=c14becb4-ce4c-456d-abe6-28cd5a3e3221" alt=""><figcaption></figcaption></figure>

### Trend history

Shows the trend of verified fyndings.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FwwzKEy4vu2XWr1BboP3B%2Fimage.png?alt=media&#x26;token=faf742eb-9f5b-4104-bf5f-c3d6cbde0b4c" alt=""><figcaption></figcaption></figure>

You can configure the trend display only by clicking on the cogwheel ![](https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FMq5i7Uke3QBzM9eNiXMi%2Fimage.png?alt=media\&token=63609f6f-348a-4e62-8507-ed09c32ad34e) through this section.\
Trend history section will display data for the last month

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FM9C6idyor4SAREWCCTHU%2Fimage.png?alt=media&#x26;token=76daa6bf-8527-41da-ba60-1aa838db3e2e" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FwMWQdllhbOYrvEMeya7q%2Fimage.png?alt=media&#x26;token=c45889a3-c46a-4d7b-882d-665d7ae5db73" alt=""><figcaption></figcaption></figure>

### Mean Time of Status Change

By monitoring the **Status change mean time** graph in relation to the [**SLA**](https://docs.whitespots.io/appsec-portal/features/security-metrics/metrics-settings/sla) requirements, you can effectively manage and prioritize your remediation efforts, ensuring that critical vulnerabilities are promptly addressed and mitigated according to the established timelines.

Customise the view of the metric view using the Findings Status Change Time Statistics section of the Metrics Settings.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FRicbChyNecUcvYbQeL98%2Fimage.png?alt=media&#x26;token=c0a0a0ac-3e55-4452-950e-ae3eef912a8b" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2Frwg14AUngOQoExjZvk3i%2Fimage.png?alt=media&#x26;token=890f2d3e-b160-4234-b3e9-10923ff183c4" alt=""><figcaption></figcaption></figure>

* **Average Vulnerability Age** (**AVA**) calculates the average age of vulnerabilities from *creation* to *remediation*. It helps to determine how long vulnerabilities pose a potential risk.

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FhAsgrwCGI7tZwb2qjAec%2Fimage.png?alt=media&#x26;token=d6907e0e-fd39-4d98-b0bb-4d68739341e4" alt=""><figcaption></figcaption></figure>

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FOGk8xL21mkZ00x5HFmcZ%2Fimage.png?alt=media&#x26;token=f39c5931-7c72-4382-b72a-e95bc885d031" alt=""><figcaption></figcaption></figure>
* **Mean Time to Detection** (**MTTD**) measures the average time it takes to *verify* vulnerabilities from the moment they are *created* . A shorter MTTD indicates an effective and timely vulnerability detection process.

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2Fk2eRM225p0hUAbfcVFUy%2Fimage.png?alt=media&#x26;token=c2465ebf-5d1c-4179-a59c-085311fc5112" alt=""><figcaption></figcaption></figure>

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FZpBoM6ej0bWL9Ni7kvCn%2Fimage.png?alt=media&#x26;token=69ad10d6-e664-43a6-858c-336592df9fee" alt=""><figcaption></figcaption></figure>
* **Mean Time to Rejection** (**MTR**) measures the average time it takes for a finding to be *rejected* after *creation*. It provides insights into the speed of handling findings that are determined to be false positives.

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FagQqSGey36avN20svnk2%2Fimage.png?alt=media&#x26;token=a7c622ba-9907-4be6-9787-19144bd628bb" alt=""><figcaption></figcaption></figure>

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FlYIXd7CdC78Xo0D6MiyP%2Fimage.png?alt=media&#x26;token=eef56e84-f0cf-4173-a669-7424f5f26499" alt=""><figcaption></figcaption></figure>
* **Mean Time to Remediation** (**MTTR**) calculates the average time it takes to *remediate* vulnerabilities from the moment they are *verified*. A shorter MTTR indicates an efficient vulnerability resolution process.

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2F9ARuf81TwKkkOGB6pTaA%2Fimage.png?alt=media&#x26;token=8c74ead2-6420-478e-8aae-8e3f13bc6eb8" alt=""><figcaption></figcaption></figure>

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FhVZaCAJmX8YbiWDy5ehl%2Fimage.png?alt=media&#x26;token=d80813ed-d706-4237-9dd8-db6158a2dc9b" alt=""><figcaption></figcaption></figure>
* **Mean Time to Product Task Assignment** (**MTTAp**) measures the average time it takes for a *validated* finding to be assigned to a developer (*assignee*) in the Jira product space from the time it is validated. It helps to track the speed at which results are processed after validation and the initiation of the fixing process.&#x20;

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2F4kCp6XnAlZ2vsfiUrdIU%2Fimage.png?alt=media&#x26;token=737922d5-8251-47a1-a98e-70fb64d75662" alt=""><figcaption></figcaption></figure>

  <figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FFoZF7E5ExMsLtmEPVanY%2Fimage.png?alt=media&#x26;token=8234889b-f6c7-4909-88fc-b747d8016a68" alt=""><figcaption></figcaption></figure>

**Mean Time to Security Task Assignment** (**MTTAs**) measures the average time it takes for a *validated* finding to be assigned to a developer (*assignee*) in the Jira security space from the time it is validated. It helps to track the speed at which results are processed after validation and the initiation of the fixing process.&#x20;

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FN71M3Isi2cKNtoTqQjTX%2Fimage.png?alt=media&#x26;token=c1aca0cd-c28a-4a21-af2c-9926e66ca1fd" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FmdJdXpYHbAa0EV0CA9KT%2Fimage.png?alt=media&#x26;token=1e952929-7137-432c-b4e0-fd2a2facfc9f" alt=""><figcaption></figcaption></figure>

### Findings count

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FgOuEHTE7rHkg7YAYqrDh%2Fimage.png?alt=media&#x26;token=f7db05d1-7158-4daf-a242-8bebddf8d3f3" alt=""><figcaption></figcaption></figure>

Customise the view of the metric view using the Findings Count Statistics section of the Metrics Settings.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FZpDjYgXSNQddFmlEiYYj%2Fimage.png?alt=media&#x26;token=4aa324e3-c58b-4e4d-bbc2-dfc843bfe2e3" alt=""><figcaption></figcaption></figure>

1. **Finding Discovery Rate** (**FDR**) measures the rate at which new vulnerabilities are *verified per day*, either manually or automatically (through the Auto[ Validator](https://docs.whitespots.io/appsec-portal/features/auto-validator)). It helps you evaluate the effectiveness of your Auto Validator's rules and security team.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2Fc7V6yMl4oG0u1DH6GMPD%2Fimage.png?alt=media&#x26;token=cf439557-317a-4be3-909a-3705cf762773" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FePy8JfkNDnMYrP8zufaW%2Fimage.png?alt=media&#x26;token=f5724e6f-a334-4739-8942-8d10d101d582" alt=""><figcaption><p>FDR chart</p></figcaption></figure>

2. **False Positive Rate** (**FPR**) quantifies the rate of reported vulnerabilities that are later determined to be *false positives per day* manually or by [Auto Validator](https://docs.whitespots.io/appsec-portal/features/auto-validator). A lower false positive rate indicates the accuracy of your vulnerability detection tools and methodologies.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2F78kwW3PjXDuZFb1jV7yc%2Fimage.png?alt=media&#x26;token=f0420839-5938-4a8a-a063-aff19f754e64" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FotXscGZcH0a102JbkZwh%2Fimage.png?alt=media&#x26;token=d33f837e-1207-4bb2-b694-69317f6b85c6" alt=""><figcaption><p>FPR chart</p></figcaption></figure>

3. **Vulnerability Remediation Rate** (**VRR**) tracks the rate at which vulnerabilities are *resolved per day*, either manually or automatically (through the [Auto Closer](https://docs.whitespots.io/general-portal-settings/scanner-settings#auto-closer)). This metric evaluates the efficiency of your vulnerability resolution process.

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FIszW53dpri9wG0AUaTic%2Fimage.png?alt=media&#x26;token=5adbe6a3-135d-4da5-9b49-227afb5de956" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FTGz0tRvcjSA2g7Sok1gF%2Fimage.png?alt=media&#x26;token=d36492b9-fd1d-400c-b52d-e6650ede3c72" alt=""><figcaption><p>VRR chart</p></figcaption></figure>
