The Security Posture Screen
When you open SpartanX, the first item in the left-hand navigation takes you to the Security Posture screen. This is your high-level view of where your organization stands at any given moment. Rather than a static snapshot, it reflects live data — constantly updated as new engagements are run and new vulnerabilities are discovered.
Understanding the Top Risk Score
The centerpiece of the Security Posture screen is the Top Risk Score — a proprietary metric that goes well beyond a standard CVSS rating. It takes into account:
CVSS scoring, OWASP scoring, NIST mapping, and MITRE ATT&CK framework mapping
Whether vulnerabilities are actively exploitable
Exploitability complexity — from trivial one-liners to sophisticated multi-step attack chains
Business value of the affected asset
Asset value is a key differentiator. In SpartanX, you can tag assets by business importance. A CVSS High vulnerability on an isolated test machine carries very different organizational risk than the same vulnerability on a payment server in production. The Top Risk Score reflects that reality.
Risk Score: Organization-Wide and Per Engagement
The risk score shown on the Security Posture screen is calculated across all data SpartanX has about your organization. But it also exists at a more granular level: each engagement has its own risk score.
For example, if you run a penetration test focused solely on your perimeter, you'll get a dedicated risk score for that perimeter. This lets you assess risk in context — comparing the overall organizational posture against the results of a specific engagement.
Key Metrics at a Glance
Below the Top Risk Score, the dashboard surfaces a set of core metrics:
Total Vulnerabilities: The total count of vulnerabilities across your environment. For example: 1,100 vulnerabilities currently tracked.
Assets: Anything SpartanX monitors — IP addresses, API endpoints, code repositories, or URLs.
Collections: Groupings of assets. A typical example is the perimeter collection, which bundles everything exposed externally. Another might be an API gateway collection.
Business Applications: Higher-level groupings that may span multiple API endpoints and web applications — representing a complete business use case.
Engagements: The number of red team engagements or penetration tests that have produced results.
Vulnerability Breakdown and Riskiest Collections
The dashboard provides a vulnerability breakdown by severity: Critical, High, Medium, and Low — giving you an immediate sense of where the most urgent work lies.
The Riskiest Collections panel shows which groupings of assets carry the highest risk scores. You can drill into any collection to see its top 10 critical vulnerabilities, or switch the view to rank the most vulnerable assets within that collection. This makes it easy to prioritize remediation where it will have the most impact.
Collection Distribution
The Collection Distribution view gives you a breakdown of all your collections — distinguishing between standard collections, engagement-based collections, and business applications. Collections without vulnerabilities typically mean no assets have been added yet, or no engagement has been run against them. Once you run an engagement, results populate automatically.
Always Fresh — No More Stale PDF Reports
One of the core design principles behind SpartanX is moving away from static, point-in-time PDF reports. Traditional pen test reports are often outdated by the time they land in your inbox. SpartanX keeps your security posture live — if you run recurring engagements, you always have the latest picture of your environment.
The Security Posture screen is built to be glanceable and actionable. Scroll through it to get a quick status check, or use it as the starting point for deeper investigation into specific collections, assets, or engagements.
What's Next
This overview is just the starting point. Subsequent videos in this series go deeper into each area — collections, engagements, vulnerability management, reporting, and more. Once you're comfortable with the Security Posture screen, you'll have the foundation to get the most out of everything SpartanX offers.