Trends & SLAs

The Trends & SLAs tab displays how a security program is meeting goals from an SLA perspective and provides trending data about findings in a security program. It allows the configuration of SLAs based on specific criteria and allows visual data to determine if those criteria are being met.
The Trends and SLAs tab contains multiple containers:
  • Mean Time to Close by Severity
  • Trend of Findings Opened vs. Closed
  • Service-Level Agreements (SLAs): every SLA that is enabled for that tenant
Admins can set up SLAs through the Admin Dashboard (Tenant Settings>Service-Level Agreements) or by clicking SLA Settings.
If no SLAs are enabled, a message will appear on the page:
When filters are selected, the data displayed refreshes, and the active filters are listed at the top of the page.


Search filters allow users to refine and narrow search results based on specific criteria or parameters.
Analytics filter values and data sets are updated every minute. If a tag or field was updated but did not appear as expected, wait one minute and try again.
A list of all filters and values exists below:
  • Client
  • Client Tags
  • Date Range
  • Finding Severity
    • Critical
    • High
    • Medium
    • Low
    • Informational
  • Finding Tags
  • Report
  • Report Tags
  • CVE ID
  • CWE ID

Mean Time to Close by Severity Container

This container shows the mean time to close findings by severity every month over the specified time range for findings matching the filter criteria.
This graph shows MTTR averages only findings that have been closed.

Trend of Issues Opened vs. Closed Container

This container displays a bar graph showing the Monthly Trend Chart of Open vs. Closed Findings over the date period specified in the filter for findings that match the given filter criteria.
A trending blue line shows the total number of open findings. A green bar identifies the number of closed findings, while a red bar identifies the number of opened findings.
To make the graph easier to view, days with zero findings opened or closed are hidden.

Service-Level Agreements (SLAs) Containers

These containers provide visual representations and snapshots of findings based on enabled SLAs and selected query parameters.
  1. 1.
    A total count for all findings that exceed, nearing or are within one day of the SLA.
  2. 2.
    A view of the mean time to remediate, plus any findings nearing one day of SLA, over a period of time.
  3. 3.
    A view of how many findings by a percentage of overall findings exceeded SLA over a period of time.
Further details and the ability to directly edit any findings that apply to the SLA can be obtained by clicking on the appropriate box under "CURRENT SNAPSHOT."