Remediation Dashboard
Summary:
A new Remediation dashboard is live in Analytics for all customers. The dashboard shows how valid vulnerabilities move from discovery to fix, how fast remediation happens, and what the unresolved backlog costs in USD. Works on its own for any customer, and complements H1 Remediation for accounts who have it.
What we did:
Shipped a new Remediation dashboard covering the flow from discovery to fix, MTTR trends against history and peers, backlog ageing, and the cost of open exposure risk.
Introduced a new metric, Carrying cost of exposure debt, which connects to. Return on Mitigation. RoM prices the risk that a customer has removed. Carrying costs of exposure debt price in the risk are still sitting in their backlog. Same Annual Loss Expectancy model, same org settings, opposite side of the ledger.
Added Findings flow, the first view tracing every finding through the full funnel in one chart, from all findings through valid, to a remediation plan created, to remediated, coloured by severity. It exposes the gap between a valid finding and a plan to fix it.
Added Days to zero backlog, our first forward-looking metric in Analytics. It turns 90 days of discovery and remediation rates into a timeline to clear the current backlog, with a separate figure for High and Critical.
Corrected MTTR to count valid reports only, and updated the Executive dashboard to match.
Why we did it:
Discovery is no longer the bottleneck, the market finds fast and. Remediation is. Submissions grew 76% year on year, while the unresolved critical backlog grew. Customers had no visibility into how their backlog ages, and no way to put a number on the risk left open. Return on Mitigation demonstrates the value of delivered fixes. Nothing priced the work at an outstanding level, which is the number a CISO needs when asking a board for remediation capacity, and also supports a use case for our new Remediation product.
Who it helps:
CISOs and security leaders who report risk to a board in dollars rather than vulnerability counts.
Program Managers who need evidence remediation keep pace with discovery, and a case for more capacity when the gap widens.
CSMs and AEs in QBRs and renewal conversations. Use this when an account questions the value of Triage spend or Remediation spend,, or asks how their MTTR compares with peers.
How to use it:
Open Analytics -> Remediation.
Read three surfaces together: Discovery to remediation trend for direction, Vulnerabilities by age for the standing backlog, and Days to zero backlog for the timeline.
Use Findings flow to find where valid findings stall before anyone plans a fix.
Use the Carrying cost charts to sequence remediation by money. A handful of critical findings outweigh a large volume of low-severity ones.
Org Admins set the inputs behind the dollar figures in Settings > Return On Mitigation. The same inputs drive Return on Mitigation, so both dashboards stay consistent.
Learn more: Docsite page