Security overview
Production

9 findings need attention now

412 open across 1,284 assets in 3 AWS accounts and 2 GCP projects. 6 of the 9 critical findings already have a fix.

Last scan 12 min ago · Up to date24 h7 days30 days90 days
Open findings
412
−38 this week
Critical
9
+2 since Friday
Mean time to remediate
4.2 days
−0.8 days
New detections per day
34
today · avg 27
Open findings by severity
412
open
Critical9
High57
Medium168
Low178
Findings opened vs resolved
Weekly, last 12 weeks
Opened 486Resolved 524
11 Aug25 Aug8 Sep22 Sep6 Oct20 Oct3 Nov
Compliance
4 frameworks
87%
SOC 2 · 212 of 244 controls
ISO 27001
81%
CIS AWS 1.5
74%
PCI DSS 4.0
92%
Open findingsAll severities 412Critical 9High 57Medium 168Low 178Search ID…
IDFinding · assetSeverityAgeStatus
WDL-2026-0412
Remote code execution in yaml-loader 3.1.2
api-gateway · container
Critical2dSAOpen
WDL-2026-0398
Bucket fern-exports allows public listing
s3 · acct 4412-prod
Critical5hMOIn progress
WDL-2026-0371
IAM role with wildcard admin policy
ci-deploy-role · iam
High6dJWOpen
WDL-2026-0366
TLS 1.0 still enabled on edge load balancer
lb-edge-eu-west-1
High9dLPTriaged
WDL-2026-0349
Plaintext secret in Lambda environment
lambda · billing-sync
High13dTRIn review
Fix first1 of 5 doneBy risk
Patch yaml-loader to 3.1.4 in 14 images
Fixes WDL-2026-0412 · PR #2291 ready
Block public listing on fern-exports
1-click fix · bucket policy
Scope ci-deploy-role to 6 actions
Suggested least-privilege policy
Disable TLS 1.0 on lb-edge-eu-west-1
Needs a maintenance window
Move billing-sync secret to Secrets Manager
Rotate key after the move
Console sign-in from a new country
jonah.weiss · Lisbon, PT · MFA passed · 4 min