Skip to main content

ASPM v1.6.1

I. Highlights​

FPT Smart Cloud introduces Export Open Findings in AppSec v1.6.1 as part of the FPT Security Platform (FSP).

Export Open Findings lets you download the complete list of open findings in a workspace as a CSV file — with filters for detection time range and severity, and inheriting all search and filter conditions currently applied on the Workspace screen. AppSec and DevSecOps teams can analyze findings offline, consolidate security reports, prioritize remediation by severity, and share results with stakeholders without requiring direct portal access.

II. Released Features​

1. Export Open Findings​

a. Description​

Users can export all open findings in a workspace to a CSV file directly from the Workspace screen (App Security → Workspace, All Assets tab). The export dialog allows configuring the detection time range and severity before downloading.

b. Features​

"Export Open Findings" button on Workspace:

  • Located above the asset list, to the right of the "Assets (N)" label and to the left of the Sort dropdown
  • Always visible, even when the workspace has no findings
  • Click → opens the Export Open Findings dialog

"Export Open Findings" dialog:

  • Issues in the last N days filter: dropdown — 1 / 3 / 7 / 15 / 30 / 60 / 90 days; default 7 days
  • Severity filter: multi-checkbox Critical / High / Medium / Low; default Critical and High selected
  • Export to CSV button is disabled when no severity is selected
  • Fixed info note: "Export results reflect the search and filters currently applied to the findings list. Export is limited to 100,000 rows — apply filters to narrow results if your findings exceed this limit."
  • Cancel button and X icon: close the dialog without exporting
  • Dialog closes automatically after a successful export

Exported CSV file:

  • Filename: AppSec-opened-Findings-YYYY-MM-DD.csv
  • Structure: 16 fixed columns — Severity Level, Severity Score, Scan Type, Issue, Status, Identifier, Location, Line, Platform, Current Version, Fixed Version, HTTP Method, Response, Description, Remediation, Detected At
  • Conditional columns are populated only for their corresponding scan type (SAST / Secret / IaC / Image / DAST); other scan types leave these columns blank

c. Capacity​

  • Applies to all scan types: SAST, Secret Scanning, IaC, Container Image, DAST
  • Export scope: only findings with Open status — Ignored / False Positive / Accepted Risk findings are excluded
  • Export results inherit all search and filter conditions currently applied on the Workspace screen
  • Limit: 100,000 rows per export
  • If no findings match the selected conditions, the CSV file contains only the header row with no data
  • Dialog filters reset to default on each open; previous export selections are not saved