Everything to centralize and manage your application security findings
From ingestion to remediation, servasec provides the tools your team needs to track, triage, and resolve security issues across your entire application portfolio.
Ingestion and integration
Multi-scanner support
Ingest results from Semgrep, Trivy, Gitleaks, Grype, Snyk, Checkov, and TruffleHog. Auto-detection of scanner type from file content.
- JSON / SARIF format
- Auto-detect scanner
- API token auth
CI/CD pipeline integration
Push scan results from any CI/CD platform via a simple curl command. Version-aware ingestion with branch and tag tracking.
- curl-based push
- Version upsert
- Branch/tag metadata
Webhooks and alerts
Configure per-application webhooks with HMAC signing. Trigger on critical and high findings to Slack, Teams, or your custom endpoint.
- HMAC-SHA256 signed
- Event filtering
- Per-app configuration
Analysis and visualization
Dashboard and KPIs
At-a-glance view of total findings, overdue items, severity distribution, and recent scan activity. Quick actions for common tasks.
- Severity distribution
- KPI cards
- Quick action shortcuts
Version comparison
Compare findings between two versions to instantly see what was fixed, what is new, and what is still present.
- Fixed / New / Still present
- Per-version findings
- Regression detection
Findings management
Browse, filter, and search findings by severity, status, scanner, and application. Rich detail view with remediation guidance.
- Advanced filtering
- CWE mapping
- Remediation advice
Collaboration and governance
RBAC and team management
Role-based permission system. Create teams, assign members, and control access at the application level with read and write roles.
- Role-based access
- Team-based access
- Granular permissions
Assignments and comments
Assign findings to team members with due dates. Collaborate via comments directly on findings. Track review history.
- User assignment
- Due date tracking
- Inline comments
API token security
Regenerable API tokens for CI/CD integration. Secure session management with automatic token rotation.
- Token management
- Auto-rotation
- Per-app tokens