Roles and views

One warehouse of findings, shown differently to the people who make different decisions with it. Every view reads the same shared truth — a number on an executive chart drills down to the same findings an engineer sees.

AppSec Lead

The operating role. Full findings view, upload and integrations, the dedup and Jira confirmation queues, scoring weights, target tiers, user administration and the audit log.

Executives (CISO, CTO)

The trajectory view: risk posture over time, severity mix, remediation momentum, and board-ready summaries that export cleanly. Every headline number links through to the underlying findings — shared truth, not a parallel spreadsheet.

Developers and dev leads

A focused "my work" view: the findings routed to their team, in priority order, each with its evidence and a suggested fix as guidance. No dashboard archaeology required.

Guests

Time-boxed accounts (auditors, consultants) that expire automatically and are deactivated by the pipeline when they lapse.