> For the complete documentation index, see [llms.txt](https://docs.appfactor.io/52eJroWboQfTwsFl14gL/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.appfactor.io/52eJroWboQfTwsFl14gL/quickstart-guide/security-blast.md).

# Security Blast

## Overview

The Security Blast is an interactive vulnerability intelligence and impact visualization module that maps detected CVEs to affected hosts in real time. It enables security teams to quickly identify high-risk vulnerabilities, understand blast radius, and prioritize remediation based on severity and exposure.

The module combines CVE data, host inventory, severity classification, and dependency relationships into a unified visual analysis workspace.

<figure><img src="https://3117893838-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FepYt9QlYazTOKSlt9tWX%2Fuploads%2FcP6v79iMTxdrBxSmot21%2FScreenshot%202026-02-13%20at%2016.06.43.png?alt=media&amp;token=e8ce12e0-2a2e-484e-9ef1-cf12922823b0" alt="" width="563"><figcaption><p>The Security Blast interface</p></figcaption></figure>

It provides a consolidated, visual view of vulnerabilities across discovered hosts and applications. It aggregates CVEs by severity (Critical, High, Medium, Low, Unknown) and maps them directly to affected systems, allowing teams to see not only how many vulnerabilities exist, but where they are concentrated. The graph-based layout makes it easy to identify high-risk hosts, commonly recurring CVEs, and systemic exposure across the estate.

In a migration or modernization context, Security Blast enables prioritised remediation and risk-aware decision-making. It helps determine which systems should be addressed before migration, which workloads carry unacceptable exposure, and where patching or rebuild strategies are required. By correlating vulnerabilities with specific hosts and runtimes, it transforms raw CVE data into actionable security intelligence that can guide wave planning, compliance validation, and production readiness assessments.

{% hint style="info" %}
A **CVE (Common Vulnerabilities and Exposures)** is a standardized identifier assigned to a publicly disclosed security vulnerability in software, hardware, or firmware. Each CVE has a unique ID in the format *CVE-YYYY-XXXX*, which references a specific flaw and links to details such as affected versions, severity (typically via a CVSS score), and remediation guidance. Managed by MITRE and used globally by security vendors and tools, CVEs provide a common language for identifying, tracking, and managing cybersecurity risks.\
The official CVE website is:

[https://cve.mitre.org](https://cve.mitre.org/)

For searching and viewing detailed vulnerability records, the primary database is:

[https://www.cve.org](https://www.cve.org/)

For severity scores and enriched vulnerability data (NVD – National Vulnerability Database):

[https://nvd.nist.gov](https://nvd.nist.gov/)
{% endhint %}

***

## Use Cases

Security Blast is ideal for:

* Incident response impact assessment
* Patch prioritization
* Risk-based vulnerability management
* Executive risk reporting
* Infrastructure exposure analysis

***

## Interface Layout

The Security Blast workspace is divided into five primary sections:

### CVE List Panel&#x20;

Displays all detected vulnerabilities.

**Key elements:**

* Total CVEs count (e.g., *329 CVEs*)
* Search bar for filtering by CVE ID
* Scrollable list of CVEs
* Host count indicator per CVE
* Selected CVE highlighted in red

Selecting a CVE updates the detail panel and visualization graph.

### Severity Summary Bar&#x20;

Displays aggregated vulnerability counts by severity:

* **CRITICAL** (red)
* **HIGH** (orange)
* **MEDIUM** (blue)
* **LOW** (gray)
* **UNKNOWN**

These counters provide an immediate risk overview across the environment.

### CVE Detail Panel&#x20;

Displays detailed metadata for the selected CVE.

Example fields:

* **CVE ID**
* **Hosts affected**
* **Package**
* **Severity**
* **Vendor**
* **Version**
* **Description**

This panel provides contextual intelligence including:

* Affected version ranges
* Technical vulnerability explanation
* Patch availability
* Configuration mitigation notes

Use this panel to assess exploitability and remediation urgency.

### Blast Radius Visualization&#x20;

The interactive graph visualizes:

* The selected CVE as the focal node
* Affected hosts connected via red relationship lines
* Host clusters grouped by environment or logical segmentation
* Color-coded nodes representing severity or classification

**Red connection lines** represent confirmed exposure relationships.

This graph enables rapid assessment of:

* Impact concentration
* Cross-environment spread
* Critical infrastructure exposure
* Potential lateral risk

Hovering over nodes reveals identifiers. Clicking nodes may refine the graph.

### Hosts Panel&#x20;

Displays all hosts impacted by the selected CVE.

Features:

* Total affected host count (e.g., *52 Hosts*)
* Search bar for filtering by hostname
* Hostnames with associated metadata indicators
* Scrollable list view

Selecting a host may highlight it within the visualization graph.

***

## Usage

{% stepper %}
{% step %}

### Select a CVE

Choose a vulnerability from the CVE list.
{% endstep %}

{% step %}

### Review Severity

Check severity level in both the summary bar and detail panel.
{% endstep %}

{% step %}

### Analyze Blast Radius

Use the visualization graph to:

* Identify affected clusters
* Detect high-density impact areas
* Determine infrastructure criticality
  {% endstep %}

{% step %}

### Inspect Affected Hosts

Use the Hosts panel to:

* Identify production systems
* Locate internet-facing assets
* Prioritize remediation targets
  {% endstep %}
  {% endstepper %}

### Visual Indicators

| Indicator           | Meaning                                       |
| ------------------- | --------------------------------------------- |
| Red lines           | Confirmed vulnerability exposure              |
| Large node cluster  | High concentration of related vulnerabilities |
| Severity color tags | Risk classification                           |
| Host count badge    | Number of affected systems                    |

***

## Best Practices

* Prioritize remediation for CVEs with high host density and critical severity.
* Investigate clusters that span multiple environments.
* Use host filtering to isolate production or internet-exposed systems.
* Review vendor patch notes from the detail panel before deployment.
* Re-scan after remediation to validate risk reduction.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.appfactor.io/52eJroWboQfTwsFl14gL/quickstart-guide/security-blast.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.