SigmaSec
Loading SigmaSec workspace
SigmaSec
Loading SigmaSec workspace
SigmaSec
Loading SigmaSec workspace
Learn how to manage assets, interpret posture scores, and contact engineering support.
Add target web URLs, repositories, or container images in the **Assets** tab. Set ownership and environment details.
Trigger parallel scanner engines (Nuclei, Trivy, Gitleaks) manually or automatically on PR commits via GitHub App integrations.
Scanners query NVD, CISA KEV, and FIRST EPSS. The platform calculates a 0-100 asset **Risk Score** dynamically.
Assign vulnerabilities, change statuses, track SLA aging deadlines, and open automated AI Fix PRs to patch findings.
Starting baseline score representing a completely clean, uncompromised infrastructure.
Subtracted per open Critical severity finding (multiplied by the asset's weight).
Subtracted per open High severity finding (multiplied by the asset's weight).
Medium and Low findings appear in your queue but don't change the score.
Set per asset (low, medium, high, critical). Higher-weight assets multiply deductions up to 2.0x.
Awarded per vulnerability resolved in the last 7 days (capped at +20 points max).