Compliance

The compliance tab of the application details section lets you generate various reports. Currently, Qwiet AI generates the following reports:

• OWASP 2025: displays the number of issues found for each OWASP 2025 category;

• OWASP 2021: displays the number of issues found for each OWASP 2021 category;

• OWASP 2017: displays the number of issues found for each OWASP 2017 category;

• PCI Report: displays information covering the application security-specific portions of the Payment Card Industry (PCI) Data Security Standard (DSS) v4.0. Qwiet AI focuses on eighteen specific requirements across sections 3, 4, 6, and 10 of PCI DSS and whether your app complies with each requirement.

• CWE: displays information about the CWEs in your application (if present) and the associated findings

Use the View report dropdown menu to switch between the report types.

OWASP 2025

The OWASP 2025 report displays the number of findings in your application for each OWASP category (e.g., 3 total issues for A01 - Broken Access Control).

Dashboard screen showing OWASP 2025 summary information

For each OWASP category, Qwiet AI displays the full list of issues encompassed by that category and whether that issue is present in your application. Clicking on the hyperlink will take you to a list of findings for that specific issue type (e.g., when you click on the Cross-Site Scripting or NoSQL Injection hyperlink under A05 Injection, Qwiet AI will display a full list of findings indicating where in your source code this issue is present).

Expanded view of OWASP 2025 categories showing detailed issues

OWASP 2021

The OWASP 2021 report displays the number of findings in your application for each OWASP category (e.g., 10 total issues for A01 - Broken Access Control).

Dashboard screen showing OWASP 2021 summary information

For each OWASP category, Qwiet AI displays the full list of issues encompassed by that category and whether that issue is present in your application. Clicking on the hyperlink will take you to a list of findings for that specific issue type (e.g., when you click on the Directory Traversal hyperlink, Qwiet AI will display a full list of findings indicating where in your source code this issue is present).

List of findings specific to an OWASP 2021 category

OWASP 2017

The OWASP 2017 report displays the number of findings in your application for each OWASP category (e.g., 3 total issues for A1 - Injection).

Dashboard screen showing OWASP 2017 summary information

For each OWASP category, Qwiet AI displays the full list of issues encompassed by that category and whether that issue is present in your application. Clicking on the hyperlink will take you to a list of findings for that specific issue type (e.g., when you click on the HTTP Header Injection hyperlink, Qwiet AI will display a full list of findings indicating where in your source code this issue is present).

List of findings specific to an OWASP 2017 category

PCI DSS

The PCI report covers eighteen application security-specific requirements spread across sections 3, 4, 6, and 10 of PCI DSS v4.0 and indicates whether your app complies with these requirements.

Dashboard screen to generate PCI report

To obtain your report, click Export Report and indicate if you'd like to Export as PDF or Export as HTML.

Sample PDF of PCI DSS report generated by Qwiet AI

CWE

The CWE report displays a list of CWEs and indicates whether those issues are present in your application. If a particular CWE is present in your application, you'll see information about the findings that introduced the issue.

To export your data, click Export Report and indicate if you'd like to Export as PDF or Export as HTML.