Hey everyone,
We've been using a CNAPP platform for a few quarters now, and while the alerts are great, I felt like we were missing the bigger picture on whether our overall posture was actually improving. It was hard to answer a simple question from leadership: "Are we getting more secure, or just finding more problems?"
So, I spent some time this week pulling data from our CSPM and CWPP modules into a custom Grafana dashboard. The goal was to visualize trends, not just snapshots.
The core idea is tracking counts of critical/high findings over time, but broken down by environment (prod vs. dev) and resource type. I also added a panel for mean time to remediate (MTTR) on those high-severity issues, which has been really eye-opening. It's one thing to see 50 cloud storage buckets are public; it's another to see that the average time to fix them has dropped from 14 days to 5 days over the last six months.
I'm curious how others are tracking longitudinal security posture. Are you mostly relying on the vendor's built-in reporting, or have you built custom views like this? If you've built dashboards, what metrics have you found most meaningful for showing genuine progress (or highlighting stubborn gaps)?