Applications
The Applications page provides an inventory of the applications monitored by OX. It helps you understand which applications are connected to OX, assess their security posture, prioritize remediation efforts, and manage application settings across your organization.
Depending on the OX capability, an application can represent:
A source code repository
A repository branch
A cloud account
A container image registry
A DAST target URL
Each application represents a code repository, cloud account, container registry, or another supported asset that OX analyzes.
Use this page to:
Review the applications monitored by OX.
Prioritize applications based on business importance.
Filter applications by technology, ownership, scan coverage, and other attributes.
Perform bulk actions on multiple applications.
Perform pipeline integration.
Open an application to review its details and associated issues.
To review details of each application, select an application name. The Application Details page provides detailed information about an application's security posture, issues, scan coverage, connected assets, metadata, and related findings.
To perform actions in the Application page, see Manage Applications.
Applications table
Each row represents an application monitored by OX.
Business priority assigned to the application. OX uses this value as one of the severity factors when calculating issue severity.
App Name
Name of the application. Select the application to open its details page.
OX in Pipeline
Indicates whether the application participates in OX pipeline scanning.
Tags assigned to the application.
Highest Severity Issues
Number of Critical, High, Medium, and Low issues currently associated with the application.
PBOM
Visual summary of the application's Product Bill of Materials (PBOM).
Last Code Change
Indicates when the application's source code was last modified.
Filter applications
Use the filters to display only applications that match specific criteria.
You can combine multiple filters to narrow the results.
Application
Display one or more specific applications by name.
Severity
Find applications that contain issues of a specific severity level, helping you prioritize remediation efforts.
Category
Display applications by asset type, such as repositories, repository branches, cloud accounts, container registries, or DAST targets.
App Tag
Find applications with specific user-defined and OX-generated tags. Tags can be used to organize applications and define application scopes.
Custom Tag
Find applications with specific user-defined tags only.
Application Source
Display applications based on how they were onboarded to OX, such as source control, cloud, container registry, or DAST.
CI/CD
Find applications associated with a specific CI/CD platform.
Orchestrator
Display applications deployed through a specific container orchestration platform, such as Kubernetes.
Registry
Find applications associated with a specific container image registry.
Artifact Type
Display applications by the type of artifact that OX analyzes.
Container as a Service
Find applications deployed to managed container services.
Cloud Deployment
Display applications running in a specific cloud deployment environment.
Connection Name
Find applications imported through a specific OX connector. This is useful when managing multiple integrations with the same platform.
SCA Coverage
Find applications that are or are not covered by Software Composition Analysis (SCA).
SAST Coverage
Find applications that are or are not covered by Static Application Security Testing (SAST).
Secret Coverage
Find applications that are or are not scanned for exposed secrets.
IaC Coverage
Find applications that are or are not scanned for Infrastructure as Code (IaC) security issues.
Security Tool Source
Display applications with findings imported from a specific third-party security tool.
OX in Pipeline
Find applications that are included in or excluded from OX pipeline scanning.
Languages
Display applications that contain code written in specific programming languages.
Package Manager
Find applications that use a specific package manager, such as npm, Maven, or NuGet.
App Classification
Display applications assigned to a specific application classification.
Analyzed Branch
Find applications associated with a specific repository branch.
Business Priority
Display applications within a specific Business Priority range.
Code-to-Cloud Exposure
Find applications based on their code-to-cloud exposure status.
CI/CD Type
Display applications by the type of CI/CD platform used to build and deploy them.
Related information
Active Issues
Last updated