Security overview
Security posture score
72/100
↑ 4 pts from Q4 2025
Active incidents
3
1 critical · 2 medium
Critical vulnerabilities
12
↓ 3 from last month
Avg compliance score
78%
↑ 2% from last assessment
Mean time to detect
6.2 hrs
MTTD
Mean time to remediate
4.1 d
MTTR — incidents
Patch compliance
84%
Critical patches applied
Security training
91%
284 / 312 staff complete
Vulnerability distribution
Incidents — last 6 months
Compliance by framework
Vulnerability trend — 6 months
Recent incidents
| ID | Title | Severity | Status |
|---|
Top open risks
| Risk | Likelihood | Impact | Score |
|---|
Risk Management
Total risks
24
Critical risks
5
High risks
8
Risks mitigated (90d)
6
Risk by category
Risk heatmap — likelihood vs impact
Risk trend — 6 months
Risk by owner
Risk register
| ID | Risk | Category | Likelihood | Impact | Score | Owner | Status | Due date |
|---|
Vulnerabilities
Critical
12
Total
3
Exploitable
High
34
Total
9
Exploitable
Medium
67
Total
14
Exploitable
Low
89
Total
2
Exploitable
MTTR (critical)
2.1 d
MTTR (high)
5.8 d
SLA compliance
87%
Avg age (open)
18.4 d
Vulnerabilities by severity
Vulnerability trend — 6 months
Top affected assets
Time to remediate by severity
Vulnerability list
| CVE / ID | Title | Severity | CVSS | Asset | Discovered | Status | SLA deadline | Exploitable |
|---|---|---|---|---|---|---|---|---|
Incidents
Open
3
In investigation
2
Closed (30d)
7
MTTD
6.2 hrs
Incidents by severity (30d)
Incidents over time
Incidents by type
MTTR trend — 6 months
Incident log
| ID | Title | Severity | Type | Detected | Status | Source | Assignee | Resolved |
|---|
Cloud & Platform Security
Microsoft 365 · AWS Security Hub · Google Workspace — all three auto-update from connections configured in Admin → Integrations.Microsoft 365
—
AWS Security Hub
—
Google Workspace
—
Platform score trend
Open findings by severity
Findings
| ID | Platform | Category | Finding | Severity | Resource | Source account | Discovered | Status |
|---|---|---|---|---|---|---|---|---|
Identity
AWS IAM users, roles, and derived risk findings — reuses the AWS Security Hub connection under Admin → Integrations.Compliance
Overall compliance
78%
Open findings
14
Controls passing
187
Controls failing
32
Controls warning
0
Compliance by framework
Compliance trend — 12 months
Findings by category
Control pass/fail by domain
Compliance controls
| Control ID | Title | Framework | Status | Evidence | Last assessed | Owner |
|---|---|---|---|---|---|---|
Security Awareness
Training completion
91%
284 / 312 staff
Phishing click rate
8.3%
Phishing report rate
62%
Overdue training
28
Training completion by department
Phishing simulation results — 12 months
Training completion trend
Security culture score
Training status by department
| Department | Staff | Completed | In progress | Overdue | Completion % | Phish click % |
|---|
Third-Party Risk
Total vendors
47
High risk vendors
6
Assessments due (30d)
9
Avg vendor risk score
62/100
Vendors by risk tier
Vendor risk score distribution
Assessment status
Top risk categories
Vendor register
| Vendor | Category | Risk tier | Risk score | Last assessed | Next assessment | Status | Owner |
|---|
Crown Jewels
The business processes that matter most to this client, the applications that support each one, and the tech stack behind each application. Click a business process or an application to expand it.
Business processes
0
Applications
0
Tech stack components
0
User Management
Manage portal users, roles, and client access.Loading...
Data Import
Bulk-load or refresh risks, vulnerabilities, incidents, compliance controls, and vendors from a CSV export.Loading...
Integrations
Connect external systems used to automatically collect compliance evidence.Loading...
Client Backup
Backup and restore just the selected client’s own data.Loading...
Full Backup
A disaster-recovery backup of the entire database, every client at once. A host-level setting, independent of whichever client is selected above.Loading...
Clients
Manage tenants, contact details, and offboarding data export.Loading...
Configuration
Portal logo, and system-wide AI and email configuration.Loading...
Team
Manage users for your client.Loading...
News Archive
A daily cybersecurity briefing, generated by Claude.Loading...
Docs
Knowledge base for using the vCISO Portal.Loading...