VECTR
VECTR copied to clipboard
SecurityRiskAdvisors
"Assessment Overview" feature request
Hi team SRA!
Once again, thanks for your hard work.
As we are transitioning our operations into Vectr, there are some things it might be interesting to include as a single location for documenting our red/purple operations. Opening this as an issue to see if others agree.
The inclusion of something like an "Assessment Overview" would be interesting. Sort of an executive summary like section inside an assessment that would provide context on what you're looking at before diving into the test cases.
Things that might be interesting to include there would be:
- Natural language summary of the assessment
- Threat model
- Goal of assessment (business level or even flags for red team)
- Participants and roles to encourage red/blue participation (maybe could integrate with RBAC when that comes to tag actual users)
- Outcomes of the assessment (business or technical)
These would be nice things to include in the report exports, as well, to deliver a single PDF to those without Vectr access or knowledge.
I created an absolutely dreadful example in this picture below. The sections are just right off the top of my head, but if this type of feature is useful to the community I'm sure others would have better ideas.
Thanks for providing a mockup, that helps us clearly understand the request. We're in the process of cooking up some requirements for an Assessment Planner as well as changes to the Campaign screen which would include similar information at the Campaign level. From what you've shown here, it seems like it would make a lot of sense at the Assessment level too. I'll discuss with the team and see what we can prioritize.
@thebleucheese Assessment Planner sounds really exciting! That planning stage is a big part of what I was thinking of addressing with this issue, too.
I look forward to hearing more.
Thanks again!
I just want to add that I too would love this feature both on assessment and campaign level.
