Consume results with CAST Gatekeeper
Overview
CAST Gatekeeper is the reporting route to your analysis results, provided by the optional dashboards component. Where the Viewer is for exploring a single application interactively, Gatekeeper consolidates results from successive snapshots into grades, KPIs and trends, and lets you drill into rule violations and plan remediation.
It provides three dashboards, each aimed at a different audience:
| Dashboard | Answers | Aimed at |
|---|---|---|
| Management | How healthy is this application, and is it improving or getting worse? | Executives and managers |
| Engineering | Where are the violations, and what should we fix first? | Developers and quality leads |
| Security | Where is the application exposed, and which risks are real? | Security teams |
What you need
The dashboards component is optional and separately licensed, so it is not present in every deployment. It is included in installation scenarios S1, S4 and S5 - see CAST Imaging components and Choose your deployment.
Beyond the component itself, a dashboard needs a license, the right permissions, and published analysis results before it will show you anything. Prerequisites covers all three, and what to check when the action to open a dashboard is missing or greyed out.
The three dashboards
Consolidated grades, sizing and trends for one application or a whole portfolio, with an ISO-5055 view and Automated Enhancement Point data.
Drill from a Health Measure down to the violating object, then plan the work with action plans, exclusions and the education list.
The same investigation, scoped to security: CWE, OWASP, PCI-DSS and the ISO-5055 security characteristic.
Other guides
What a dashboard needs before it will show results, who is allowed to open one, and how to reach each dashboard from the application landing page.
Standalone, template-driven compliance reports (CWE, ISO-5055, NIST, OMG-ASCQM, OWASP, PCI-DSS, STIG) in Microsoft Office formats, for one application or across a portfolio.
Two ways to produce a report
Gatekeeper offers reporting in two different places, and they serve different needs:
- Inside the Engineering and Security dashboards - Standard Compliance and Miscellaneous Reports, generated on demand for the application you are looking at.
- Report Generator - a separate tool that builds documents from Microsoft Office templates you control, suitable for repeatable and automated reporting, including portfolio-level reports across many applications.
If you need a document that matches a company format, or the same report produced for every new version, use Report Generator. For a quick compliance view of the application in front of you, use the in-dashboard reports.