Connect dependencies, vulnerabilities, licenses, alerts, and code scans in one application security workflow.
Review Monitored ProjectsProject cards summarize ecosystem, dependency, license, and vulnerability posture at a glance.Review Security PostureThe dashboard consolidates portfolio-wide risk indicators and recent alerts for quick assessment.Review DependenciesThe searchable inventory shows where each package is used and whether it introduces known risk.Review License ComplianceLicense summaries and package-level details expose compliance issues across monitored codebases.Manage VulnerabilitiesThe prioritized findings list connects each vulnerability to affected dependencies and projects.Triage Security AlertsAlert cards provide severity, affected package, remediation state, and ownership controls in one queue.Browse CVE IntelligenceThe CVE catalog supports direct research across current vulnerability intelligence.Manage Semgrep RulesThe rule library lets teams inspect and control the static analysis checks applied to projects.Analyze Project VulnerabilitiesThe project view narrows portfolio findings to the vulnerabilities affecting one codebase.Review Code StatisticsLanguage-level code metrics provide context for the size and composition of the scanned project.Configure Project ScanningPer-project rule controls align static analysis coverage with the codebase and risk profile.Review Project DependenciesThe scoped inventory shows exactly which dependencies and risks belong to the selected project.