Security insights

1. 1

   Go to your Workspace settings, then Security, then Security center, and finally Security insights.

   This is where you can see an overview of all your projects and their potential security or ownership issues.

2. 2

   Look at the summary cards to see the total number of projects, how many are published online, and how many have a high review priority.

   This gives you a quick understanding of your workspace's overall security and governance status.

3. 3

   Use the search bar to find projects by name or owner, and apply filters for things like review priority, publishing status, or specific findings.

   This helps you narrow down the list to focus on projects that match specific criteria you're concerned about, like publicly exposed projects with security issues.

4. 4

   Click on any project row in the table to see why it's flagged and what specific issues it has.

   This provides the details you need to understand the problem and decide on the next steps.

5. 5

   Click on a project name to go to its full details page, or click 'Run deep scan' (or 'Run PII scan' for Enterprise plans) from the expanded row.

   This allows you to investigate the project further or initiate a fresh security check directly.

6. 6

   If needed, export the project table to a CSV file using the export control in the Security center header.

   This is useful for sharing data with others, auditing, or creating reports.

Hey Lovable, can you show me all projects in our workspace that are publicly exposed and have a high review priority, so I can check for critical security findings?

Review priority

A rating (High, Medium, Low) that tells you how urgently a project needs your attention based on its security risks and other signals.

PII

Personally Identifiable Information, which is any data that could be used to identify a specific person, like their name, address, or email.

Abandoned projects

Projects that haven't had any activity (like edits or messages) for a set period, usually 60 days, which might mean they are no longer maintained.

Orphaned projects

Projects whose owner is no longer an active member of the workspace, meaning they need a new person to be responsible for them.

Edge functions

Small pieces of code that run closer to your users, often used for faster performance or specific tasks.

• Assuming the data is always perfectly real-time; some values can be slightly delayed.
• Forgetting that activity data like edits and visits can lag by up to 24 hours.
• Not realizing that Security insights identifies issues, but you still need to go to the project itself to fix them.
• Missing important findings because you're not on a Business or Enterprise plan, as some features like PII scanning are plan-specific.