8.0 Understanding the OWASP Security Dashboards and Reports

Select > Reports > Portal > Repository > Standard Content > OWASP.

We provide dashboards and reports based on the industry-wide standards set by the Open Web Application Security Project® . OWASP is a nonprofit foundation that works to improve the security of software. The organization has established a list of the Top 10 security risks to web applications, focusing on the most critical threats to the shared, on-demand nature of web-based applications.

Reporting includes the following dashboards and reports, organized according to OWASP’s Top 10 riskcategories:

Category	Dashboards	Reports
Broken Access Control	n/a	Broken Access Control
Broken Authentication	n/a	Broken Authentication and Session Management
Cross-site Scripting	Cross Site Scripting	XSS Vulnerabilitiess
Injections	Injection Vulnerabilities Overview	Command Injections on HTTP Request Injection Vulnerabilities SQL Injection
Insecure Deserialization	Deserialization Flaws Overview	Deserialization Flaws
Insufficient Logging and Monitoring	Attacks and Suspicious Activity Failed Logins Overview Login Activity Overview Operating System Errors and Warnings Security Log is Full	All Logins by Hostname Audit Log Cleared Failed Logins Summary
Security Misconfiguration	Misconfiguration Events Overview Missing Security Patches Overview	Security Patch Missing
Sensitive Data Exposure	Information Leaks Overview	Organizational Records Information Leaks Personal Information Leaks
Using Components with Known Vulnerabilities	SSH Vulnerabilities Overview Vulnerability Overview	SSH Vulnerabilities Summary SSL Vulnerabilities
XML External Entities	XML Vulnerabilities Overview	XML Vulnerabilities