PrimusSaaS.Security.Reporting 2.0.0

PrimusSaaS.Security.Reporting

Security reporting, compliance mapping, and governance dashboards for the Primus Security Suite

Overview

The Security.Reporting package transforms raw security scan results into actionable reports for security teams and compliance officers. Generate executive summaries, compliance reports, and detailed vulnerability findings with built-in support for OWASP, PCI DSS, HIPAA, SOC 2, and GDPR frameworks.

Features

• 📊 5 Export Formats: PDF, HTML, JSON, CSV, SARIF
• ✅ 5 Compliance Frameworks: OWASP Top 10, PCI DSS 4.0, HIPAA, SOC 2, GDPR
• 📈 Security Posture Scoring: 0-100 scale based on vulnerability severity and coverage
• 📉 Trend Analysis: Historical metrics, fix rates, security debt tracking
• 🎯 Executive Dashboards: High-level summaries for leadership
• 🔍 Detailed Reports: Code snippets, remediation guidance, impact analysis

Installation

dotnet add package PrimusSaaS.Security.Reporting

Quick Start

using PrimusSaaS.Security;
using PrimusSaaS.Security.Reporting;

// Run security scan
var scanner = new SecurityScanner();
var scanResult = await scanner.ScanAsync("./MyProject");

// Generate comprehensive report
var reportingService = new ReportingService();
var report = await reportingService.GenerateReportAsync(scanResult);

Console.WriteLine($"Security Posture Score: {report.Metrics.SecurityPostureScore}/100");
Console.WriteLine($"Total Vulnerabilities: {report.Metrics.TotalVulnerabilities}");

// Export to PDF
var pdfBytes = await reportingService.ExportReportAsync(report, ExportFormat.PDF);
await File.WriteAllBytesAsync("security-report.pdf", pdfBytes);

// Check OWASP compliance
var owaspScore = await reportingService.GetComplianceReportAsync("OWASP");
Console.WriteLine($"OWASP Compliance: {owaspScore.Score}%");

Compliance Frameworks

Export Formats

PDF

var pdf = await reportingService.ExportReportAsync(report, ExportFormat.PDF);

HTML (Interactive Dashboard)

var html = await reportingService.ExportReportAsync(report, ExportFormat.HTML);

JSON (API Integration)

var json = await reportingService.ExportReportAsync(report, ExportFormat.JSON);

SARIF (Industry Standard)

var sarif = await reportingService.ExportReportAsync(report, ExportFormat.SARIF);
// Upload to GitHub Security tab

CI/CD Integration

GitHub Actions

- name: Security Scan with Reporting
  run: |
    dotnet tool install --global PrimusSaaS.Security.CLI
    primus-security scan ./src --report-format SARIF --output security.sarif
    
- name: Upload to GitHub Security
  uses: github/codeql-action/upload-sarif@v2
  with:
    sarif_file: security.sarif

Azure DevOps

- task: DotNetCoreCLI@2
  displayName: 'Security Scan'
  inputs:
    command: 'custom'
    custom: 'primus-security'
    arguments: 'scan $(Build.SourcesDirectory) --report-format HTML --output $(Build.ArtifactStagingDirectory)/security-report.html'

Metrics & Trend Analysis

// Get security metrics for last 30 days
var metrics = await reportingService.GetMetricsAsync(
    startDate: DateTime.UtcNow.AddDays(-30)
);

// Get vulnerability trends
var trends = await reportingService.GetTrendsAsync(
    period: TimeSpan.FromDays(90),
    type: TrendType.Vulnerability
);

foreach (var dataPoint in trends.DataPoints)
{
    Console.WriteLine($"{dataPoint.Timestamp}: {dataPoint.Value} vulnerabilities");
}

Status

🚧 Phase 1 Complete - Core infrastructure, models, and APIs implemented
📋 Next: Phase 2 - Report generators and compliance mapping

Related Packages

• PrimusSaaS.Security - Core security scanning with 13 analyzers
• PrimusSaaS.Security.AI - AI-powered vulnerability remediation

License

MIT © Primus Software Corporation