View and Explore Outbound Endpoint Risk

In the Endpoint Risk dashboard, view and explore an application risk distribution by outbound endpoints.

Outbound endpoints are external resources accessed from an application, such as APIs, databases, or message queues. These endpoints are collected by Agents no matter if they are vulnerable or not.

Prerequisites: The Data Flow Map feature is enabled for your project. For instructions, see Configure Data Flow Map.

The dashboard

In the main menu, click (Projects), choose a project that you want to view, and click Endpoint Risk > Outbound endpoints.

The top banner displays the vulnerability metrics of outbound endpoints: the total number of endpoints, the numbers of vulnerable endpoints, public and unknown APIs.

Actions

Here is what you can see and do in this dashboard.

Action	Instruction
Set version filter	Select which project versions to include. Use text search to find versions other than the latest.
Set project filter	For composite projects only: select which regular projects to include.
Set severity filter	Select which severity levels to include.
Set endpoint filter	Select one or more of the following filters: APIs with legal agreements, Public APIs, Unknown APIs, With vulnerabilities, Without vulnerabilities.
Set text filter	Enter a text by which to filter the endpoints.
Refresh	Refresh the endpoint view.
Reset	Clear the endpoint view and gradually rebuild it using the new information collected by the Agents.
View endpoint details	Click any row in the table or choose View from the (cog) menu to view the detailed information about the endpoint, such as path, type, number of detected vulnerabilities, sample calls, and more details for public APIs, such as legal agreements. Tip: Click a non-zero value in the Vulnerability count column or choose See vulnerabilities from the (cog) menu to view these vulnerabilities in the Vulnerabilities page.
Delete an endpoint	Choose Delete from the (cog) menu to delete the current endpoint from the list. The deleted endpoint will not reappear unless it is collected again.
Mark an endpoint as public API	For unknown APIs only: choose Mark as public API from the (cog) menu to associate this endpoint with a public API.
Bulk actions	For regular projects only: perform bulk actions for all endpoints matching the current filters. Aggregate Duplicate Endpoints