--- title: Visualization library description: The Visualization library lists all the widgets that you can use to visualize and categorize findings. It includes a set of default widgets and any custom widgets that you create for organization-specific reporting. You can browse the available widgets, understand the data they use, and add them to dashboards to build tailored security exposure views. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/sem-visualization-library.html release: australia topic_type: concept last_updated: "2026-03-12" reading_time_minutes: 3 breadcrumb: [Administration, Security Exposure Management Workspace, Explore, Unified Security Exposure Management, Security Operations] --- # Visualization library The Visualization library lists all the widgets that you can use to visualize and categorize findings. It includes a set of default widgets and any custom widgets that you create for organization-specific reporting. You can browse the available widgets, understand the data they use, and add them to dashboards to build tailored security exposure views. You can use the Visualization library to: - **Explore available widgets** Review the complete set of default and custom widgets available for building dashboards. - **Understand widget behavior** Review key details such as data sources, grouping, visualization type, and activation status to choose the appropriate widget for your analysis. - **Create a custom widget** Build and configure your own widgets to visualize specific metrics or data insights that matter most to your organization. The following table lists the available widgets, associated tables, and what they display.
| Widget name | Findings tables | Description |
|---|---|---|
| Deferred findings by reason | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active deferred records grouped by reason. |
| Findings by assignment group | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records assigned to various assignment groups. |
| Findings by base image | Container vulnerability | Active records categorized by the type of the image. |
| Findings by CI class | - Infrastructure vulnerability - Application vulnerability - Misconfigurations | Active records categorized by CI classes. |
| Findings by cloud resource | - Infrastructure vulnerability - Misconfigurations | Active records categorized by various cloud resources. |
| Findings by remediation status | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records grouped by remediation status. |
| Findings by risk rating | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records categorized by the risk ratings.- 1: Critical - 2: High - 3: Medium - 4: Low - 5: None |
| Findings by scan type | Infrastructure vulnerability | Active records grouped by the scan type. |
| Findings by source | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records grouped by the source. |
| Findings by state | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records categorized by various states \(Open, Under Investigation, Awaiting Implementation, In Review, Resolved, and Deferred\). |
| Findings by technology | Misconfigurations | Active records categorized by technology. |
| Findings by test group | Misconfigurations | Active records categorized by the test groups. |
| Findings by Vulnerability | - Infrastructure vulnerability - Application vulnerability - Container vulnerability | Active records categorized by vulnerability. |
| Findings by Vulnerability Classification | - Infrastructure vulnerability - Application vulnerability - Container vulnerability | Active records categorized by vulnerability classification. |
| Findings not in remediation task | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records that are and aren't part of the remediation task. |
| Findings on external-facing assets | - Infrastructure vulnerability - Application vulnerability - Misconfigurations - Container vulnerability | Active records categorized by the asset exposure to internet. |
| Findings with exploits | - Infrastructure vulnerability - Application vulnerability - Container vulnerability | Active records with and without known exploits. |