[ 01 ] — Platform — Analytics
Prove the program is working — in numbers the board understands.
Dashboards for engineering, security leadership and auditors, built from validated data rather than raw scanner noise.
Which vulnerability metrics matter most?
The most useful metrics are time to remediate by severity, open critical exposure over time, duplicate rate and cost per valid finding. They show whether risk is actually going down, not just how many reports arrived.
[ 02 ] — Capabilities
Executive summary
Risk trend, spend and coverage on one page.
Remediation SLAs
Time-to-fix by team, asset and severity.
Benchmarking
Compare your exposure with anonymised peers in your industry.
Researcher insights
See which skills and researchers deliver the most signal.
Compliance exports
Evidence packs mapped to SOC 2, ISO 27001, PCI DSS and more.
Scheduled reports
Automatic PDF and CSV delivery to stakeholders.
[ 04 ] — Questions people ask
Do analytics include autonomous test results?+
Yes. Findings from AutoVAPT AI and from human researchers appear side by side, so you see coverage from both.
[ ∞ ] — Next step