Dynamic Scan dashboard
The Dynamic Scan dashboard provides a centralized view of Dynamic Application Security Testing (DAST) results collected from Tenable.io within DevOps Intelligence. The dashboard enables development and security teams to review vulnerability findings, analyze severity metrics, monitor scan activity and identify applications and technical services that may require remediation.
Users can review high-level vulnerability trends through dashboard visualizations and access detailed scan information for onboarded applications and technical services.
Applications are onboarded to Dynamic Scan through the Application Configuration process. Once an application is configured, vulnerability and scan data collected from Tenable.io become available in the Dynamic Scan dashboard. This allows users to review scan results, vulnerability counts, severity information, scan dates and associated technical service details from a single interface.
Access Dynamic Scan
Follow these steps to access the Dynamic Scan dashboard that includes visualizations for critical and high vulnerabilities and provides access to detailed vulnerability information for technical services:
- From the Kyndryl Bridge main menu
, go to Services → Platform Services → Toolchain & Pipeline → DevOps Intelligence .
- From the left navigation pane, select DevOps Overview.
- Navigate to Secure application and expand it and select Dynamic Scan.
Dynamic Scan page
The Dynamic Scan page provides access to Dynamic Application Security Testing (DAST) results collected from Tenable.io. Users can review vulnerability information for onboarded technical services and applications, analyze severity metrics through dashboard visualizations and access detailed scan results from a centralized interface. The page also includes filtering, search and data management options to help users identify and investigate security findings
Page Components
The following two charts provide a visual summary of the technical services with the highest number of security findings identified by Tenable.io scans:
- Top Technical Services by Critical Vulnerabilities: This chart highlights the technical services with the highest number of critical vulnerabilities identified by Tenable.io scans. The visualization helps users quickly identify applications that may require immediate attention and remediation.
- Top Technical Services by High Vulnerabilities: This chart displays the technical services with the highest number of high-severity vulnerabilities. The visualization provides a quick view of services that present significant security risks and may require prioritization by application owners and security teams.
Dynamic Scan Table
The Dynamic Scan table provides a detailed view of vulnerability findings for onboarded technical services. It helps users monitor application security posture, identify services with the highest security risks, and review the most recent scan results from Tenable.io.
The table includes the following information:
- Technical Service: The technical service or endpoint that was scanned.
- Application: The application associated with the technical service.
- Vulnerabilities: The total number of vulnerabilities identified during the scan.
- Critical: The number of vulnerabilities classified as Critical severity.
- High: The number of vulnerabilities classified as High severity.
- Last Scan: The date of the most recent dynamic scan.
- Secure Engine: The security scanning engine used to perform the scan, such as Tenable.
The table can be filtered using the available search and filter options, allowing users to focus on specific applications, environments and vulnerability findings. Search works for non-numerical columns.
Users can navigate to a detailed view for a technical service to review additional vulnerability information, scan metrics, severity breakdowns and related security findings.
Dynamic Scan details
To view Dynamic Scan details, select a URL from the Technical Service column in the Dynamic Scan table. The Dynamic Scan Details page opens and displays summary metrics, including total vulnerabilities, critical vulnerabilities, high vulnerabilities, scan engine and last scan date, along with detailed vulnerability findings for the selected URL.
The Dynamic Scan Details table provides detailed information about vulnerabilities identified for the selected technical service URL.
This information helps users analyze security findings, understand their impact and prioritize remediation activities:
- Plugin: Unique identifier assigned to the vulnerability check performed by the scan engine.
- Name: Name of the vulnerability or security finding.
- Family: Category to which the vulnerability belongs.
- URI: The affected URL or endpoint where the vulnerability was detected.
- Severity: The vulnerability severity level, such as Critical, High, Medium, or Low.
- Description: Summary of the vulnerability and its potential security impact.
- Action: Allows users to download vulnerability details for further analysis and reporting.
Dynamic Scan for Onboard Technical Service
When editing or creating an Onboard Technical Service, select Dynamic Scan from the available scan options for Secure Categories. This enables the technical service to display and track Tenable.io DAST results, allowing users to monitor vulnerabilities, scan status and security posture for the selected application or service.
Once Dynamic Scan is enabled for a technical service:
- A Dynamic Scan filter is added under the Secure section, allowing users to filter and view technical services configured for dynamic security scanning.
- A Dynamic Scan column is added to the Onboarded Technical Services table, providing visibility into whether dynamic scan data is enabled and available for each technical service.
- Users can quickly identify which technical services are configured to display Tenable.io DAST scan results within DevOps Intelligence.
- Tenable will be added in Tool configuration once onboarded.
For information about onboarding and managing technical services, see Onboarding Technical ServicesOnboarding Technical Services.