← All reports
Demo layout
This report is an illustrative placeholder — the charts and figures are sample data, not a finalised spec. Real data model and acceptance criteria must be planned before implementation.
Security Review
5
Findings
2
Open
2
Remediated
1
High / critical
Severity distribution
HIGH1
MEDIUM2
LOW2
Remediation status
● 2 remediated● 2 open● 1 accepted
Findings5
HIGHOpen
SEC-001Scale endpoint lacks rate limiting
Unauthenticated burst can force max-crew scale-out — cost + DoS vector.
⌨autoscaler-api·ORD-0216
MEDIUMRemediated
SEC-002Crew slot tokens logged at debug level
Tokens redacted in log formatter; verified by runtime scan.
⌨dispatcher·ORD-0212
MEDIUMOpen
SEC-003Missing mTLS dispatcher ↔ autoscaler
Internal traffic unauthenticated within the workspace boundary.
⌨autoscaler-api·ORD-0216
LOWRemediated
SEC-004Outdated jwt dependency
Bumped to patched release; no known CVE remaining.
⌨maestro-cli·ORD-0212
LOWAccepted
SEC-005Verbose errors leak internal paths
Localhost-only in v1 — risk accepted, tracked for hardening.
⌨autoscaler-api·ORD-0216