Viewing security insights

Monitor your organization or enterprise security posture, identify high-risk repositories, and track alert remediation progress using the overview dashboard in security overview.

Who can use this feature?

Access requires:

  • Organization views: write access to repositories in the organization
  • Enterprise views: organization owners and security managers

In this article

The overview page in security overview provides a consolidated dashboard of your organization or enterprise's security landscape. You can filter the dashboard by time period, tool, and other criteria to focus on specific areas of interest. For more information about the overview dashboard, available metrics, and access permissions, see About security overview.

Note

The summary views ("Overview", "Coverage" and "Risk") show data only for default alerts. Secret scanning alerts for ignored directories and non-provider alerts are all omitted from these views. Consequently, the individual alert views may include a larger number of open and closed alerts.

Viewing the security overview dashboard for your organization

  1. On GitHub, navigate to the main page of the organization.

  2. Under your organization name, click Security.

    Screenshot of the horizontal navigation bar for an organization. A tab, labeled with a shield icon and "Security," is outlined in dark orange.

  3. The overview page is the primary view that you will see after clicking on the "Security" tab. To get to the dashboard from another security overview page, in the sidebar, click Overview.

  4. By default, the Detection tab is displayed. If you want to switch to another tab to see other metrics, click Remediation or Prevention.

  5. Use the options at the top of the overview page to filter the group of alerts you want to see metrics for. All of the data and metrics on the page will change as you adjust the filters.

    • Use the date picker to set the time range that you want to view alert activity and metrics for.
    • Click in the search box to add further filters on the alerts and metrics displayed.

    Screenshot of the overview page in security overview. Filtering options are outlined in dark orange, including the date picker and search field.

Viewing the security overview dashboard for your enterprise

  1. In the top-right corner of GitHub Enterprise Server, click your profile picture, then click Enterprise settings.

  2. On the left side of the page, in the enterprise account sidebar, click Code Security.

  3. By default, the Detection tab is displayed. If you want to switch to another tab to see other metrics, click Remediation or Prevention.

  4. Use the options at the top of the overview page to filter the group of alerts you want to see metrics for. All of the data and metrics on the page will change as you adjust the filters.

    • Use the date picker to set the time range that you want to view alert activity and metrics for.
    • Click in the search box to add further filters on the alerts and metrics displayed.

    Screenshot of the overview page in security overview. Filtering options are outlined in dark orange, including the date picker and search field.

Tip

You can use the owner filter in the search field to filter the data by organization. For more information, see Filtering alerts in security overview.

Next steps

The dashboard displays metrics about alert status, remediation velocity, and high-risk repositories in your organization or enterprise. For detailed explanations of each metric and how it's calculated, see Security overview dashboard metrics.

You can filter the dashboard by time period, tool, repository, and other criteria. For more information, see Filtering alerts in security overview.