Advanced Security Reports

JFrog Advanced Security Reports let you generate an aggregated view of Exposures findings and results.

Exposures Report

The Exposures report identifies where components in your code and binaries are actively invoked, so you can focus on real, exploitable risks, not just theoretical vulnerabilities. By detecting actual usage paths of vulnerable functions and insecure libraries, it helps you prioritize the exposures that pose the greatest threat to your applications.

Unlike static vulnerability listings, this report shows where an exposure occurs in the context of your software's execution, so you can make informed decisions about remediation. It includes severity ratings, impacted components, and evidence of invocation across your artifacts, builds, and Release Bundles.

For more information about other JFrog Xray report types, see Xray Reports.

The following REST APIs support Advanced Security Reports:

• Generate Exposures Report
• Get Exposures Report Content
• Export a Report
• Delete a Report
• Abort a Report

Related Topics

• Features and Capabilities
• JFrog Xray
• Contextual Analysis of CVEs