nl-kat-coordination
nl-kat-coordination copied to clipboard
[EPIC] Improve Aggregate Report
Description
The latest version still needs some improvements. To do this, create a new branch and create a PR. Please update the list below and check the boxes if an improvement is completed.
Improvements on Interface
Table of content
- [x] Vulnerabilities: make styling of IP addresses/hostnames prettier (address/hostnames only)
- [ ] Vulnerabilities: add "New" tag to new IPs
- [ ] Basic Security: add status tag (C/M/S) to sub-items
Summary
- [ ] Extend summary
Recommendations
- [ ] Retrieve data from recommendations in a different way
Asset overview
- [ ] Add "New" tag to new IPs
Basic security
General
- [x] Mail, Web, DNS, Other -> add "server" to the titles (like in Figma)
- [ ] Compliancy issues: Icons are always "icon negative" -> It should depend on the risk level
- [ ] Compliancy issues: Add unfolding for findings
- [ ] Checks: Add hyperlinks
- [ ] Add subtitle with status tag (Critical/Medium/Secure, Score: 100%, Sector: 90%)
Overview
- [x] Add hyperlinks to the table
- [ ] Add tooltips to the table
System specific
- [ ] Web: Ensure that all checks that aren't compliant are displayed in the Compliance Issue table
Vulnerabilities
- [ ] Hostnames are not displayed
- [x] Every system is displayed, even if there are no vulnerabilities -> Exclude those
Appendix
- [ ] Add content
Other
- [x] Improve PDF
Improvements on Backend
Data Collection
- [ ] We should think about enforcing the type of output objects for the reports or just do queries in the aggregate reports, because the aggregation logic has become a mess.
- [ ] If we are not going to do queries in the aggregate report, we should optimize by not running the same reports on multiple items in the same system that collect the same finding types.