Skip to main content

Dashboard

The Claw GRC dashboard is your compliance command center. It provides a real-time overview of your organization's security and compliance posture across all active frameworks.

Overview​

When you log in, the dashboard displays four key areas:

Compliance Score​

The compliance score is a percentage representing how many of your applicable controls have current, validated evidence. The score is calculated as:

score = (controls_with_valid_evidence / total_applicable_controls) * 100

The score updates in real time as evidence is uploaded, validated, expires, or is invalidated by new findings.

Framework Progress​

A breakdown of your compliance progress per framework. Each framework shows:

  • The number of controls satisfied vs. total controls
  • A progress bar showing completion percentage
  • Color coding: green (>80%), yellow (50-80%), red (<50%)

Since controls are mapped across frameworks through the unified control taxonomy, satisfying a control for one framework automatically counts toward overlapping requirements in others.

Evidence Status​

A summary of your evidence health:

  • Current -- Evidence within its freshness window
  • Expiring Soon -- Evidence within 14 days of its freshness expiration
  • Expired -- Evidence past its freshness window that needs to be refreshed
  • Pending Validation -- Evidence that has been uploaded but not yet reviewed

Recent Activity​

A timeline of the latest actions in your organization, including:

  • Evidence uploads and validations
  • Policy approvals
  • Risk updates
  • Agent interactions and MCP tool invocations
  • Assessment completions and new findings

API Endpoints​

The dashboard data is powered by the analytics endpoints:

  • GET /api/v1/analytics/compliance-score -- Overall compliance score with per-framework breakdown
  • GET /api/v1/analytics/evidence-status -- Evidence freshness and validation statistics
  • GET /api/v1/analytics/risk-summary -- Risk register summary by severity and treatment

See the Analytics API for full endpoint documentation.

Tips and Best Practices​

  • Set up evidence refresh reminders -- Configure notification thresholds to get alerted well before evidence expires.
  • Prioritize critical controls -- Focus on controls that are mapped to the most frameworks, as satisfying them gives you the most compliance coverage.
  • Review agent activity daily -- The activity feed shows what your agents are doing. Regularly review agent actions to maintain oversight.
  • Export for stakeholders -- Use the Reports feature to generate PDF summaries for board meetings and executive reviews.