Security: the daily score against SOC 2 and GDPR controls

Only the Balio team sees this page, and within it only owners and Balio admins.

Security shows whether Argus still passes the controls that a SOC 2 or GDPR review asks about. It is a read-only dashboard built from automatic scans: a score, its history, and each open finding with its next step.

Where to find it

In the Balio sidebar, click Security.

The Security page with the score gauge, counts by priority and the score over time

How to read it

  1. The line under the title gives the time of the last scan. Scans run every day at 10:00 Dubai time and after each release.
  2. The badge at the top right sums up the state: for example "1 to fix now", or All clear.
  3. The gauge shows the score from 0 to 100. Each tick around the dial is one check, grouped by area and coloured by its state.
  4. Beside the gauge: the band, the change over recent scans, how many checks pass, and four counts: Fix now, Fix soon, Worth a look and OK. Two bars show SOC 2 and GDPR separately.
  5. Score over time has one point per daily scan, with the open findings as bars under the line.
  6. By area shows each check's state in the area it guards, such as Access, Database, Secrets and Code.
  7. Open findings lists them, most urgent first, then the oldest. Each one says how long it has been open, what was found, the Next step, its area and the controls it belongs to.
  8. Every check, folded at the bottom, opens the full table of checks with their state.

What the labels mean

  • Bands: Strong is 90 and over. Fair is 75 to 89. At risk is under 75.
  • Fix now: a check failed, so something has to change.
  • Fix soon: a finding that has been open for 7 days or more and is still undecided.
  • Worth a look: a person has to decide whether it is fine.
  • The score: a passing check counts in full, one worth a look counts half, and a failed one counts nothing.

Good to know

  • The page is read only. Nothing here changes access or sends anything.
  • No secret, e-mail address or name is shown.
  • Some findings point to settings outside Argus, such as two-step sign-in in your Google admin. Argus cannot see those, so a person confirms them.
Was this helpful?