Key Features

• Rule Validation: Ensure that CI Lookup and Assignment rules are correctly identifying and assigning AVITs. Guidance is available for revising these rules to maintain accuracy and automation.
• Remediation Target Management: Validate and track remediation targets through specific rules associated with AVITs, which are executed upon AVIT import.
• Dashboards and Reporting: Utilize built-in dashboards and reports to monitor AVIT statuses, including aging by state and priority. Activation of the Performance Analytics for Vulnerability Response application provides enhanced visibility tailored for App-Sec Managers and Security Champions with dedicated dashboards like Application Vulnerability Response Overview and My Application Vulnerabilities.
• Risk Assessment and Reassignment: Continuously review and update AVIT risk levels and reassign them to appropriate remediation groups as necessary.
• Automated Rescanning and State Management: Third-party imports trigger automatic rescans. AVITs with a “Fixed” state are closed automatically, while others are reopened for further action.
• Integration with Veracode: Access detailed Veracode vulnerability data directly from AVIT records, including HTTP source requests, responses, and solution recommendations, enhancing remediation accuracy.

Practical Benefits

• Streamlines vulnerability remediation by providing a clear process and automation points.
• Improves tracking and prioritization of vulnerabilities through dashboards and analytics tailored to different security roles.
• Ensures accurate assignment and risk evaluation to facilitate timely and effective remediation efforts.
• Leverages third-party integrations for enriched vulnerability context and recommended solutions.