Skip to content
Findings Dashboard

Signal, turned into a narrative.

Raw security findings rendered into a clear, prioritised, human-readable story, severity, business impact, and remediation, all legible at a glance.

Findings narrative
Client viewLive engagement
Current postureRisk requiring a decision
Updated now
Open findings28Across four severity bands
Material exposure11Critical and high combined
Remediation verified62%Moving in the right direction
Priority narrativeCritical
Authentication boundary bypassIdentity and access · Validated
One inherited token can cross three trust boundaries and reach a client-data service without a second decision.
Business consequenceUnauthorised access to regulated client dataRequired decisionRevoke the path and rotate inherited trust
Risk distributionLive
Critical4High7Medium11Low6
Owned 21Unassigned 7
Technical evidence retainedBusiness impact attachedRemediation ownership visible
From data to direction

A list tells you what exists. A narrative tells you what to do.

Being handed a problem is not the same as being handed a way through it.

The distance between the two is where most security reporting fails. The Findings Dashboard is the firm’s “signal to narrative” philosophy made visible: it takes the raw output of an engagement and renders it as a story a busy executive and a working engineer can each read in their own way.

Severity is shown in the brand’s own language of colour. Business impact sits beside technical detail, so the “why it matters” is never separated from the “what it is.” Remediation progress is live, turning a static report into a shared, moving picture of risk being reduced.

One finding, two readers

Precise enough for engineers. Legible enough for leadership.

The same validated finding is interpreted at two altitudes without splitting into competing versions of the truth.

Leadership viewConsequence
Critical data exposureDecision required today

A dormant authentication path can reach regulated customer data without the controls leadership expects to be present.

Exposure
Material
Owner
Identity team
Decision
Contain now
Engineering viewEvidence
boundaryservice-token → ci-runner → data-vaultobservationsecondary authorization absentcontrolrevoke · rotate · verify
Reproduction evidence attachedOpen technical record
What becomes visible

Every view reduces the distance between finding and action.

Interpretation

Severity at a glance

Critical, high, medium, and low, in the brand palette, instantly legible.

Interpretation

Impact beside detail

Every finding pairs its technical nature with its business consequence.

Forward motion

Live remediation

A moving picture of risk being reduced, not a static snapshot.

Forward motion

Exportable record

One click to a clean PDF for the client’s own archive and audit trail.

Risk reductionDirection of travel
Owned21 findingsVerified closed17 findingsAwaiting action7 findings
Exposure remaining
ObservedOwnedControlledVerified
Live remediation

Risk should move, not merely be reported.

Ownership, due dates, evidence, and verification remain attached to the finding until the control is genuinely restored. The dashboard shows whether exposure is falling—not just whether tasks are being closed.

One accountable ownerResponsibility stays explicitEvidence before closureStatus follows proof, not optimismShared directionClient and operator see the same progress
Governed record

The story stays readable because the evidence stays intact.

ScopeClient boundaries preserved

Every finding, view, and export remains attached to the correct engagement and audience.

HistoryChanges remain reviewable

Severity, ownership, remediation, and verification form a continuous audit trail.

DeliveryClean records on demand

Executives, engineers, and auditors receive the appropriate depth without rebuilding the report.

Signal to narrative

Turn the next report into a way through.

See the dashboard with a realistic engagement and the decisions it makes visible.