Cloud Infrastructure Tool Mapping
The table below shows the triage and severity status mappings for all of the Cloud Infrastructure tools that are supported by Software Risk Manager.
Tools are listed alphabetically. Tool results are mapped to the Software Risk Manager status shown at the top of each column. (A blank cell indicates that an equivalent status value is unavailable or undefined.)
Cloud Infrastructure Tool | Critical | High | Medium | Low | Info | Unspecified |
---|---|---|---|---|---|---|
Prisma Cloud (RedLock) | critical | high | medium | low | informational | |
AWS Security Hub* | critical, 80+ | high, 60–...–79 | medium, 40–...–59 | low, 20–...–39 | informational, 0–...–19 | |
Azure Security Center | critical | high | medium | low | informational | |
Check Point CloudGuard | Critical | High | Medium | Low | Informational | |
Microsoft Defender for Cloud | Critical | High | Medium | Low | ||
Wiz | CRITICAL | HIGH | MEDIUM | LOW | INFORMATIONAL |
Cloud Infrastructure Tool | Ignored | False Positive | To Be Fixed | Mitigated | Fixed | Reopened |
---|---|---|---|---|---|---|
Prisma Cloud (RedLock) | Snoozed | |||||
AWS Security Hub* | suppressed | notified | resolved | |||
Azure Security Center | ||||||
Check Point CloudGuard | ||||||
Microsoft Defender for Cloud | ||||||
Wiz |
*AWS reports risk through a ranking [1–100] and a severity level [low, medium, etc.]. Both are listed.