Manage vulnerabilities in your infrastructure

This document covers how to:

• Identify the vulnerabilities with the highest risk in your infrastructure
• Understand vulnerability risk for specific hosts
• Surface tasks from your security team in your daily workflow so it's easy to deliver more secure infrastructure

If this workflow doesn't sound like you, check out our document on managing vulnerabilities across all infrastructure.

Maintain the vulnerability health of your infrastructure

Once vulnerability data starts flowing into New Relic, you can access your data through various scoped views.

To monitor the health of specific hosts, navigate to one.newrelic.com > All capabilities > Infrastructure > (select an entity) > Security > Summary and use the entity scoped view. For a larger scope, refer to our document on managing vulnerabilities organization-wide.

The Security summary page for an entity gives you a high-level overview of the security of your application or service. Curated dashboards provide you an overall view of the security of your application or service, including:

• Total vulnerabilities
• Package vulnerabilities
• Misconfigurations
• Vulnerability exposure window
• Top five vulnerabilities in accordance with the priority rankings
• Vulnerability breakdown by type
• Package severity breakdown
• Top package upgrades

To monitor the health of your infrastructure, use the entity scoped view by navigating to one.newrelic.com > All capabilities > Infrastructure > (select an entity) > Security> Summary. For a larger scope, see our document on managing vulnerabilities as a security team.

Triage, prioritize, and remediate vulnerabilities

To view all vulnerabilities open for your infrastructure, in the left navigation pane, under Security section, select the Vulnerabilities.:

This page shows you all open vulnerabilities and allows you to filter them by attributes such as severity and source. Clicking on a specific vulnerability provides detailed information about its severity, sources, vulnerability status change logs, and many more.

What's next?