Monitor Your Infrastructure Security
Where to view security in the Mondoo App using the org overview, space dashboard, and asset detail views.
The Mondoo App gives you three views of your security, each at a different zoom level:
| View | What it shows | When to use it |
|---|---|---|
| Organization Overview | Trends across every space in the org | Weekly/monthly executive view |
| Space Dashboard | Risk for one space, the top fixes, and remediation progress | Daily team view |
| Asset Detail | Every check, vulnerability, and advisory for one asset | When fixing or investigating a single asset |
Organization Overview
From the Mondoo App, navigate to your organization. The overview shows security trends across every space and surfaces the highest-impact vulnerabilities org-wide.
To drill into a space, select Spaces in the side navigation and pick a space tile.
Space Dashboard
The space dashboard is the daily working view for a security team. It opens on the space's current risk and the work that reduces it the most.
The top of the dashboard shows where the space stands right now:
- A Critical Exposures banner flags remotely exploitable findings to fix first, with a shortcut to view them.
- The Space Risk score is a single measure of the space's risk, where a lower score means lower risk. Mondoo shows what the score is calculated from: the number of priority findings and the assets they affect.
- Initiatives for risk reduction ranks the highest-impact fixes by severity and the number of assets affected, with the estimated effort and status of each.
Further down, the dashboard tracks remediation and exposure:
- Tickets in progress lists open tickets that track remediation work, with who created each and its progress.
- Exposed Assets, Advisories, and CVEs break their counts down by severity, so you can see the shape of your outstanding work at a glance.
You can also select a workspace to view a subset of assets within a space.
Asset Detail
To open a single asset:
-
From a space, select Inventory > Assets in the side navigation.
-
Filter the list using the integration type chips (AWS, Kubernetes, and so on) or the search box.
-
Select the asset to open its detail page.
The asset detail page is organized into tabs:
| Tab | Contents |
|---|---|
| Overview | General security and configuration |
| Policies | The policies applied to the asset and its score on each |
| Findings | Every check the asset is evaluated against and its result |
| Data Queries | Queries that retrieve data on the asset, with results |
| Software | OS and application issues discovered on the asset |
| Vulnerabilities | CVEs found on the asset |
| Advisories | Vendor advisories found on the asset |
| Resources | Resources connected with the asset |
| Exceptions | Exceptions applied to the asset |
To learn how the asset score is calculated, read Asset and Space Risk Scores.