> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/risk-management/misconfigurations-premium/security-checks/filter-security-checks.md).

# Filter security checks

In a SaaS environment with hundreds of security checks, filtering is essential for streamlined remediation and work processes.

The ability to filter all your security checks by a range of parameters allows you to focus on critical or high-impact misconfigurations that require immediate resolution.

<table><thead><tr><th width="170">Filter</th><th>Description</th></tr></thead><tbody><tr><td>App instance</td><td><ul><li>Include or exclude one or more SaaS app instances with their relevant security checks. </li><li>Each instance of an integrated app is monitored separately.</li></ul></td></tr><tr><td>Security check</td><td><ul><li><p>Search for a specific security check using any of these operators:</p><ul><li>Equals - An exact match. This operator is case-sensitive.</li><li>Doesn't equal - Doesn't have the exact match</li><li>Starts with - Begins with the entered string</li><li>Ends with - Ends with the entered string</li><li>Contains - Has the partial string</li><li>Doesn't contain - Doesn't have the partial string</li><li>Includes - An exact match. This operator is case-sensitive.</li><li>Excludes - Doesn't have the exact match</li></ul></li><li>Each security check verifies if the compliance standard's recommendation is enforced or not.</li></ul></td></tr><tr><td>Security domain</td><td>Include or exclude one or more categories corresponding to a <a href="/docontrol-user-guide/risk-management/misconfigurations-premium/security-checks/misconfiguration-dashboard.md#lowest-posture-by-security-domain">specific domain</a> in SaaS security, such as access control, device security, privacy, or vulnerability management. </td></tr><tr><td>Compliance</td><td><p>Include or exclude one or more industry standards that recommend implementing a specific security check in your SaaS environment:  </p><ul><li>CIS </li><li>SOC 2 </li><li>NIST (CSF)</li><li>ISO 27001</li></ul></td></tr><tr><td>Status</td><td><p>Include or exclude one or more security check results: </p><ul><li><strong>Fail</strong> - Your SaaS configuration does not comply with the security check. Remediation is required.</li><li><strong>Ignore</strong> - Security check was manually skipped</li><li><strong>Info</strong> - You need to manually review this security check</li><li><strong>N/A</strong> - The SaaS configuration for this check is not available for verification</li><li><strong>Pass</strong> - Your SaaS configuration complies with the security check </li></ul></td></tr><tr><td>Impact</td><td><p>Include or exclude one or more severity levels for a potential misconfiguration: </p><ul><li><strong>Critical</strong> - Poses a severe risk to sensitive data or app operations, and requires immediate remediation.</li><li><strong>High -</strong> Presents a significant security risk and could be exploited if left unresolved. This issue should be remediated promptly.</li><li><strong>Medium -</strong> Indicates moderate security exposure or operational risk. This issue is important to address, but not immediately urgent.</li><li><strong>Low -</strong> Has minimal impact on security or operations. This issue is typically best addressed during routine maintenance.</li></ul></td></tr><tr><td><strong>More filters</strong></td><td></td></tr><tr><td>Affected</td><td><p>Search for the number of assets or resources impacted by a misconfiguration using any of these operators:</p><ul><li>Equals </li><li>More than </li><li>Less than </li><li><strong>Is global</strong> - This misconfiguration impacts your entire environment and isn't limited to specific users or groups</li></ul></td></tr><tr><td>Last run</td><td><ul><li>Search for the date when DoControl last ran a security check</li><li>Use any of these operators: equals, after, before, is between </li></ul></td></tr><tr><td>Detected on</td><td><ul><li>Search for the date when the misconfiguration was detected by DoControl </li><li>Use any of these operators: equals, after, before, is between </li></ul></td></tr></tbody></table>

{% hint style="success" %}
You can export the list of all your filtered misconfigurations to a CSV file by clicking the **Export to CSV**  <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F881XCjMVzqq30W30w9B5%2Fdownload%20report%20icon.png?alt=media&amp;token=aacce4d3-c682-41a1-8bc7-4fdb5acd56eb" alt="" data-size="line">  icon.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/risk-management/misconfigurations-premium/security-checks/filter-security-checks.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
