> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/ui/application-details/compliance.md).

# Compliance

The **compliance tab** of the application details section lets you generate various reports. Currently, Qwiet AI generates the following reports:

* **OWASP 2025**: displays the number of issues found for each OWASP 2025 category;
* **OWASP 2021**: displays the number of issues found for each OWASP 2021 category;
* **OWASP 2017**: displays the number of issues found for each OWASP 2017 category;
* **PCI Report**: displays information covering the application security-specific portions of the Payment Card Industry (PCI) Data Security Standard (DSS) v4.0. Qwiet AI focuses on eighteen specific requirements across sections 3, 4, 6, and 10 of PCI DSS and whether your app complies with each requirement.
* **CWE**: displays information about the CWEs in your application (if present) and the associated findings

Use the **View report** dropdown menu to switch between the report types.

{% tabs %}
{% tab title="OWASP 2025" %}
The OWASP 2025 report displays the number of findings in your application for each OWASP category (e.g., 3 total issues for A01 - Broken Access Control).

![Dashboard screen showing OWASP 2025 summary information](/files/fapDVwKErROSzww1hEyR)

For each OWASP category, Qwiet AI displays the full list of issues encompassed by that category and whether that issue is present in your application. Clicking on the hyperlink will take you to a list of findings for that specific issue type (e.g., when you click on the Cross-Site Scripting or NoSQL Injection hyperlink under A05 Injection, Qwiet AI will display a full list of findings indicating where in your source code this issue is present).

![Expanded view of OWASP 2025 categories showing detailed issues](/files/Px0H2dfZrMIUXQqVyShu)
{% endtab %}

{% tab title="OWASP 2021" %}
The OWASP 2021 report displays the number of findings in your application for each OWASP category (e.g., 10 total issues for A01 - Broken Access Control).

![Dashboard screen showing OWASP 2021 summary information](/files/oEP2LLHrhvMQCIJFmRYg)

For each OWASP category, Qwiet AI displays the full list of issues encompassed by that category and whether that issue is present in your application. Clicking on the hyperlink will take you to a list of findings for that specific issue type (e.g., when you click on the Directory Traversal hyperlink, Qwiet AI will display a full list of findings indicating where in your source code this issue is present).

![List of findings specific to an OWASP 2021 category](/files/KTTZ8GRlzydL1L9fCR06)
{% endtab %}

{% tab title="OWASP 2017" %}
The OWASP 2017 report displays the number of findings in your application for each OWASP category (e.g., 3 total issues for A1 - Injection).

![Dashboard screen showing OWASP 2017 summary information](/files/GCHgYDdPmANmNsiSGfIe)

For each OWASP category, Qwiet AI displays the full list of issues encompassed by that category and whether that issue is present in your application. Clicking on the hyperlink will take you to a list of findings for that specific issue type (e.g., when you click on the HTTP Header Injection hyperlink, Qwiet AI will display a full list of findings indicating where in your source code this issue is present).

![List of findings specific to an OWASP 2017 category](/files/K4UQI4f8GiATEfYqVSQf)
{% endtab %}

{% tab title="PCI DSS" %}
The PCI report covers eighteen application security-specific requirements spread across sections 3, 4, 6, and 10 of PCI DSS v4.0 and indicates whether your app complies with these requirements.

![Dashboard screen to generate PCI report](/files/FoJa3KMcfaLVTsNhg2s6)

To obtain your report, click **Export Report** and indicate if you'd like to **Export as PDF** or **Export as HTML**.

![Sample PDF of PCI DSS report generated by Qwiet AI](/files/WYjf4Q7GT6fNGPkasWBj)
{% endtab %}

{% tab title="CWE" %}
The CWE report displays a list of CWEs and indicates whether those issues are present in your application. If a particular CWE is present in your application, you'll see information about the findings that introduced the issue.

![](/files/EvOzynaB0tZodFPdTN83)

To export your data, click **Export Report** and indicate if you'd like to **Export as PDF** or **Export as HTML**.

![](/files/WmTo8c8NMs7Gn4GdE8w3)
{% endtab %}
{% endtabs %}