Systems and methods for monitoring and displaying security posture and risk

A server comprising:

• a network interface communicatively coupled to a cloud-based security system;
• a processor communicatively coupled to the network interface;
• and
• memory storing computer-executable instructions that, when executed, cause the processor to
• obtain log data from a storage cluster associated with a cloud-based security system, wherein the log data includes transaction data associated with a plurality of users of the cloud-based security system, wherein the transaction data is for one or more of cloud security service transactions, application access via a Zero Trust Network Access (ZTNA) service, and user experience metrics, and wherein the cloud-based security system includes a plurality of tenants with the plurality of users each assigned thereto;
• analyze the log data to determine a plurality of visualizations of the transaction data for a tenant;
• provide a User Interface (UI) to a mobile application with the plurality of visualizations;
• and
• provide a risk score summarizing an overall risk posture of the tenant in a single metric.

A method comprising:

• obtaining log data from a storage cluster associated with a cloud-based security system, wherein the log data includes transaction data associated with a plurality of users of the cloud-based security system, wherein the transaction data is for one or more of cloud security service transactions, application access via a Zero Trust Network Access (ZTNA) service, and user experience metrics, and wherein the cloud-based security system includes a plurality of tenants with the plurality of users each assigned thereto;
• analyzing the log data to determine a plurality of visualizations of the transaction data for a tenant;
• providing a User Interface (UI) to a mobile application with the plurality of visualizations;
• and
• providing a risk score summarizing an overall risk posture of the tenant in a single metric.