Portfolio analytics

Last updated: Oct 26, 2026

---

Portfolios are sets of groups that you create on the Fluid Attacks platform to compare analytics between the selected groups. To open a portfolio, click its name in the Portfolios section of your organization. Within a portfolio, you can see graphs and figures about the status of vulnerabilities and your remediation practices. This page describes the charts that the Analytics section shows only at the portfolio level.

Remediation rate benchmark

This chart gives an overview of your risk exposure management at the portfolio level. It shows the closed (remediated), accepted, and open (not remediated, not accepted) vulnerabilities and their distribution relative to the total detected number.

You can also compare your remediation rate with the portfolios of all organizations that have the best and the worst results, and with the average performance of portfolios. This benchmark helps you define remediation rate goals.

You can use the chart in these ways:

• Hover over a bar to see the complete percentages.
• Hover over a chart legend to highlight the related part of the chart.
• Click a chart legend to hide the related information from the visual comparison.

Distribution of vulnerabilities by group

This visualization shows the distribution of vulnerabilities in the different groups of your portfolio. It shows the vulnerabilities by their status at this time: closed, open, temporarily accepted, and permanently accepted. With this chart, you can identify the groups where more monitoring or resources can be necessary to improve their vulnerability management.

You can use the chart in these ways:

• Hover over a bar to see the complete percentages.
• Hover over a chart legend to highlight the related part of the chart.
• Click a chart legend to hide the related information from the visual comparison.

Open vulnerabilities by group

This chart shows the percentage of open vulnerabilities in each group, relative to the total number of open vulnerabilities in your portfolio. Open vulnerabilities are not remediated and not accepted. This helps you find the groups with more unresolved cybersecurity issues.

You can use the chart in these ways:

• Hover over a slice to see it highlighted with the name of the group and the related percentage.
• Hover over a chart legend to highlight the related slice.
• Click a chart legend to exclude the related group from the percentage calculation.

Undefined treatment by group

This chart shows the percentage of vulnerabilities in each group that do not have a treatment, relative to the total number of untreated vulnerabilities in your portfolio. Examples of treatments are In progress and Temporarily accepted. With this chart, you can identify the groups where your team must assign treatments to vulnerabilities immediately.

You can use the chart in these ways:

• Hover over a slice to see it highlighted with the name of the group and the related percentage.
• Hover over a chart legend to highlight the related slice.
• Click a chart legend to exclude the related group from the percentage calculation.

Exposure by group

This chart shows the risk exposure (measured in CVSSF units) of the unmanaged vulnerabilities that are not accepted, in each group of the portfolio. Thus, you can select the group where your team must decrease the risk exposure first.

Hover over a bar to see the precise CVSSF value.

Open vulnerability types by group

This chart shows the types of vulnerabilities that are not remediated and not accepted in each group. This information helps you prioritize your remediation work.

Hover over a bar to see the precise number of types.

Vulnerabilities by group

This chart shows the percentage of reported vulnerabilities of each group relative to the total number in the portfolio. With this chart, you can compare projects by the number of security issues found.

You can use the chart in these ways:

• Hover over a slice to see it highlighted with the name of the group and the related percentage.
• Hover over a chart legend to highlight the related slice.
• Click a chart legend to exclude the related group from the percentage calculation.

Unsolved events by group

This chart shows the number of unsolved events that affect each group. During an event, the tool or the analysts of Fluid Attacks cannot test part or all of the scope of a group.

It is very important to resolve these events to get complete security assessments. This chart helps you select the groups where your team must resolve events first.

Hover over a bar to see the precise number of events.

Vulnerability types by group

This chart shows the total number of vulnerability types detected in each group. This information helps you compare projects by the number of security issue categories found.

Hover over a bar to see the precise number of types.

Oldest vulnerability types

This graph shows the vulnerability types in your portfolio that are unmanaged for the longest time (days). This helps you identify and prioritize issues that are open for a long time.

Hover over a bar to see the precise number of days.

Overall availability time of groups

This chart shows the percentage of time that events affected each group, relative to the total life of the group. An event stops security testing. With this chart, you can identify the groups that you must monitor carefully.

Hover over a bar to see its complete percentage.

Days since groups are failing

This chart shows how many days the oldest unsolved event of each group is open. This information helps you identify the groups with issues that are open for a long time. Your team must resolve these issues immediately to let security testing continue.

Hover over a bar to see the exact number of days.

Tags by groups

This chart shows all the tags that you created to identify vulnerabilities. It also shows how many times each tag is used in the different groups of your portfolio. This helps you analyze security issues in your groups with categories that are important for your team.