Understand your security posture

The security posture overview gives you a quick snapshot of your web application security defenses. Status shown here fluctuates week-to-week, and you have the power to make improvements directly from this screen.

Select the security configuration you want to see

Currently, Security Hub shows your posture for one security configuration at a time, so you can view and address issues in each one. In the blue banner at the top of the screen, select the Security Configuration you want to see.

Posture at-a-glance

A quick overview of what you’re looking at when you land in Security Hub. It’s all designed to help you know where protections stand and to take action fast to plug any holes.

The chart on the top left gives a high-level posture overview. It shows

  • your posture score, which you’ll read more about in a minute
  • the percentage posture score has improved or worsened in the past week
  • ow you’re doing compared to others in your industry and geographic region

The Improve your score section on the top right, surfaces setup issues and provides links to learn more about them and take immediate action. Read on to learn more.

As you scroll down the page you can:

  • view attack traffic by type and actions taken
  • see the geographic areas where attacks come from

About scoring

Security posture score is a high-level indication of how effective your current web application security settings are. It’s an algorithmic measure from 0 to 1000 which indicates how prepared you are for attack. A score of zero is not at all prepared and 1000 is as prepared as possible.

šŸ“˜

Posture score scope

Currently, the security posture score you see is for the security configuration you selected at the top of the screen (version that’s active on production). If you have multiple security configurations, view and address issues in one, then move on to the next one.

Scores fall into various grades, which help you see when to take recommended actions.

ScoreGradeDescriptionAction
800 to 1000ExcellentReady for most attacksMonitor regularly
600 ro 799AdequateReady for most attacks with some gapsTake recommended actions
400 to 599PoorMany vulnerabilities need attentionTake recommended actions soon
200 to 399At riskHigh-risk vulnerabilities need urgent attentionUrgently take recommended actions
0 to 199CriticalExposed openly to many threatsImmediately take recommended actions

Scoring is based on factors like: the scope and breadth of protections you’ve applied, your vulnerability to specific attack vectors, coverage for known vulnerabilities, and readiness to face evolving threats. Some factors are controlled by Akamai and others controlled by you. For example, our threat response team continually updates the WAF engine and other protections based on their advanced knowledge of the latest threats. These improvements are a vital part of your protections. For your part, as you close issues identified for you to fix, you’ll see your score go higher.

Learn more about your score progress

Click Score contributors and look under each tab:

  • Closed issues are problems lowering your score that you addressed yourself. Actions and improvements you make to improve your score are a main feature of Security Hub.
  • Akamai improvements shows a list of releases and enhancements we make to continually enhance your security posture.

See and fix protection issues

Details about what you’ve protected and how thoroughly are listed in the Improve your score section. For details on viewing and addressing protection shortfalls, read how to improve your score.

See how you compare to others in your industry

You see your score (in blue) alongside others in your industry and global region (in yellow).

This comparison looks back as far as 12 weeks. Its combined slice of industry-plus-region perspective is unique to Akamai security posture reporting. This view helps you understand how your defense posture compares to your direct peers.

View a full list of covered and uncovered assets

On the upper right of the screen, click Your assets to see an inventory overview showing which of your hostnames and APIs are covered by protections and those which are not.

To learn how to take action on uncovered assets, see Improve your score.

Filter by protection area

To focus on one protection category, like DoS or web application firewall, go to the top of the page and in the Protections area, mouseover percentage coverage scores. You see the protection area name and can click it to learn more. When you do so, the top two sections of the page change. You see:

  • your posture score changes to a percentage-based score for the specific protection area you chose.
  • issues under Improve your score are limited to only those pertaining to the protection area you chose.