Key Concepts

Threat Detective is built around a few core concepts. Understanding these will help you get the most out of the platform.

Organisations

An organisation is the top-level container. It represents your company or team. All projects, components, and members belong to an organisation.

Projects

Projects represent the products or systems you are building. Each project tracks its own set of software components and the advisories that affect them.

Components

Components are the individual software libraries, packages, or dependencies used within a project. Threat Detective monitors these for known vulnerabilities.

Advisories

Advisories are vulnerability disclosures sourced from feeds such as GitHub Security Advisories. Threat Detective automatically fetches and matches them against your components, so you can see which products are affected.

What's next?

Head over to the Features section to learn how Threat Detective works in practice.