--- description: "The Compliance section on the platform shows the compliance of your software with the standards validated by Fluid Attacks at the organization and group level." keywords: "compliance, standards, organization, report, requirements, Fluid Attacks platform, Fluid Attacks documentation" other: private: false title: Check your compliance with standards --- # Check your compliance with standards import { Image } from "@/components/image"; The platform offers a comprehensive view of how well your organization and individual groups are meeting various [international cybersecurity standards](https://db.fluidattacks.com/std/), as validated by Fluid Attacks. You can find this information in **Compliance**, which offers two sections: 1. **[Overview](https://help.fluidattacks.com/portal/en/kb/articles/check-your-compliance-with-standards#See_an_overview_of_your_compliance):** Provides a high-level summary of your overall compliance posture and allows benchmarking it against other organizations 1. **[Unfulfilled](https://help.fluidattacks.com/portal/en/kb/articles/check-your-compliance-with-standards#Check_unfulfilled_standards_in_your_groups):** Lets you drill down into unfulfilled standards per group and [generate detailed reports](https://help.fluidattacks.com/portal/en/kb/articles/check-your-compliance-with-standards#Download_reports_of_requirements_needed_to_reach_compliance) on any gaps that need to be addressed Across **Compliance**, a header provides the following information: 1. **% Compliance of [organization]:** The percentage corresponding to fulfillment of [security requirements](https://db.fluidattacks.com/req/) within standards 1. **ET to full compliance:** A projection of the amount of days it might take to address all noncompliance issues, achieving a 100% compliance level 1. **Standard least complied with:** The name of the specific standard where your organization is struggling the most 1. **Lowest % compliance:** The percentage of fulfilled requirements associated to the standard you comply with the least Check compliance with standards on the Fluid Attacks platform

Check compliance with standards on the Fluid Attacks platform

## See an overview of your compliance > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** User, Vulnerability Manager or Group Manager Fluid Attacks' platform allows you to gauge your performance relative to your peers. In the **Overview** section within **Compliance**, you see how your organization stacks up against the best, worst, and average performance levels in terms of compliance with each of the [standards validated by Fluid Attacks](https://db.fluidattacks.com/std/). ## Check unfulfilled standards in your groups > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** User, Vulnerability Manager or Group Manager > [!TIP] > > Please note that the unfulfilled standards are those mapped as related to your unfulfilled requirements. This causes that, for example, you may be shown that you do not comply with [OWASP Top 10 for LLM Applications](https://db.fluidattacks.com/req/173/) if you do not meet common requirements such as [discarding unsafe inputs](https://db.fluidattacks.com/req/173/), even when your development is not an LLM application. The **Unfulfilled** section within **Compliance** allows you to zoom in on specific groups within your organization and assess their compliance with individual standards. View standard compliance of groups on the Fluid Attacks platform

View standard compliance of groups on the Fluid Attacks platform

To examine compliance at a granular level within your groups, do the following: 1. Use the dropdown menu next to the title **Unfulfilled standards (#) in group** to choose the group you want to analyze. Only groups you have access to are listed. Choose group to assess compliance on the Fluid Attacks platform

Choose group to assess compliance on the Fluid Attacks platform

1. Once you have selected a group, you see a breakdown of the standards that the group is not currently meeting in full and the number of security requirements you are yet to implement. See group noncompliance with standards on the Fluid Attacks platform

See group noncompliance with standards on the Fluid Attacks platform

Click on the dropdown menu for the standard to see the names of unfulfilled [requirements](https://db.fluidattacks.com/req/). View unfulfilled requirements on the Fluid Attacks platform

View unfulfilled requirements on the Fluid Attacks platform

> [!TIP] > > Click on a requirement of interest to see [Fluid Attacks' documentation](https://db.fluidattacks.com/req/) about it that can give you an idea of what you need to implement. Fluid Attacks' classification uses these requirement categories: [Architecture](https://db.fluidattacks.com/req/cat/arch/), [authentication](https://db.fluidattacks.com/req/cat/authn/), [authorization](https://db.fluidattacks.com/req/cat/authz/), [certificates](https://db.fluidattacks.com/req/cat/cert/), [credentials](https://db.fluidattacks.com/req/cat/cred/), [cryptography](https://db.fluidattacks.com/req/cat/crypt/), [data](https://db.fluidattacks.com/req/cat/data/), [devices](https://db.fluidattacks.com/req/cat/devices/), [emails](https://db.fluidattacks.com/req/cat/email/), [files](https://db.fluidattacks.com/req/cat/files/), [legal](https://db.fluidattacks.com/req/cat/legal/), [logs](https://db.fluidattacks.com/req/cat/logs/), [networks](https://db.fluidattacks.com/req/cat/net/), [privacy](https://db.fluidattacks.com/req/cat/priv/), [services](https://db.fluidattacks.com/req/cat/services/), [session](https://db.fluidattacks.com/req/cat/session/), [social](https://db.fluidattacks.com/req/cat/social/), [source](https://db.fluidattacks.com/req/cat/source/), [system](https://db.fluidattacks.com/req/cat/sys/), and [virtualization](https://db.fluidattacks.com/req/cat/virt/). ## Download reports of requirements needed to reach compliance > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** User, Vulnerability Manager or Group Manager In the **Unfulfilled** section, the platform allows you to download comprehensive reports of areas of noncompliance for any selected group. These are the steps: 1. In the **Unfulfilled** section within **Compliance**, select the group for which you need a report. Select group for compliance report on the Fluid Attacks platform

Select group for compliance report on the Fluid Attacks platform

1. Click on the **Generate report** button to the right.

Find button for compliance reports on the Fluid Attacks platform

1. In the pop-up window, select whether you want a **PDF** or **CSV** file. PDF is advised if you want the links to the security requirements in the report, whereas CSV is advised for further filtering the report (e.g., by requirements). Then choose which standards to include by using the toggle in the **Action** column. Download compliance report on the Fluid Attacks platform

Download compliance report on the Fluid Attacks platform

> [!TIP] > > You can use the **Exclude all/Include all** toggle to select the desired items more quickly. 1. You need a verification code to proceed. Select whether you would like to receive it via **SMS** or **WhatsApp**. Get verification code for reports on the Fluid Attacks platform

Get verification code for reports on the Fluid Attacks platform

> [!TIP] > > Make sure to have [registered your mobile phone](https://help.fluidattacks.com/portal/en/kb/articles/explore-the-user-menu#Manage_notifications) to the platform before this step. 1. Enter the code you received and click on **Verify**. Enter verification code for reports on the Fluid Attacks platform

Enter verification code for reports on the Fluid Attacks platform

Upon successful verification, the platform informs you that the report is ready, and your browser downloads it. The file becomes available in the platform for seven days thanks to the [Downloads](https://help.fluidattacks.com/portal/en/kb/articles/access-recent-downloads) feature. The downloaded report provides a group-level overview, customized by you. The PDF version shows 1. a brief description of the specific [standard](https://db.fluidattacks.com/std/)(s) that the group is not meeting; 1. the name(s) of the [associated requirement](https://db.fluidattacks.com/req/)(s) which need to be addressed to achieve compliance, linking to the relevant documentation, and 1. the name(s) of the type or [types of vulnerabilities](https://db.fluidattacks.com/wek/) associated to the requirement(s), linking to the [vulnerability URL](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#Get_the_link_to_share_the_details_of_a_vulnerability)(s) in the platform. The CSV version shows 1. the name(s) of the specific standard(s); 1. the vulnerability URL(s); 1. the name(s) of the type or types of vulnerabilities, and 1. the three-number code(s) of the associated requirement(s). > [!TIP] > > **Free trial**Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your [21-day free trial](https://app.fluidattacks.com/SignUp) and discover the benefits of the [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/) [Essential plan](https://fluidattacks.com/plans/). If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out [this contact form](https://fluidattacks.com/contact-us/).