This week: your home screen

Open This week in Strays

This week is the home screen. It greets you, says how many decisions need you, and shows where everything else has got to. Until an AWS account is connected it shows one next step: connect an AWS account.

Before the first scan has finished

Until a scan has finished, This week shows Waiting for the first scan instead of its cards. A zero would look like a clean account when really nothing has been checked yet. The page checks for the result every 20 seconds by itself (and says so when it's done); with "reduce motion" turned on in your device it tells you instead of reloading.

Needs you: nobody else can decide these

Strays shows a finding here only when no one else is placed to decide it. Each card says why it came to you. There are four reasons, checked in this order:

1. Nobody owns it. No owner tag, and CloudTrail doesn't say who made it, so there is no one to ask. How owners are found.
2. The owner has left. You have made a leaver report for the person who owns it. Their leaver report lists it.
3. It covers the whole account. Findings such as the root login apply to every region, so only someone who holds the account can decide. They are owned by Account owner (root login), the one name used for the root login everywhere in Strays.
4. 14 days without a decision. The owner was sent their items in Slack 14 or more days ago and nobody has kept, snoozed or marked anything since. (Teams cards don't count: Teams can't show whether anyone has seen them.)

The number at the top counts security risks and waste together, and says how many of each ("12 security risks and 6 waste items"), then how many others are with their owners ("The other 4 open risks and 1 waste item are with their owners"). Add the two together and you get the Security card's count and the Waste tab's count in Everything found, which cover everything open. Only open findings that aren't already kept or snoozed appear, here and in those counts. Security risks come first, High before Medium before Low, then waste by monthly cost. The first five are shown; the rest are one click away in Everything found.

What you can do with a card

• Accept the risk (on a security risk): you choose to live with it. It leaves the work list until you reopen it, but the evidence pack still counts it, so its answer stays Partly until it's fixed.
• Keep: it's needed (on waste): it is intended. It moves to "Kept or snoozed" and stays out of the work list and the open totals until you reopen it. It still counts against the evidence pack's answers, and its cost is shown as kept or snoozed.
• Snooze 30 days: hide it for 30 days. It comes back if it's still there.
• A line under the buttons says what each does, before you choose.
• Show the fix: opens the finding in Everything found, with its ready-to-run fix.

If you are a viewer, the page says so: you see the cards but not the Keep and Snooze buttons, and the heading reads "Waiting for a decision" rather than "Needs you", because it is not you who decides. Members and admins make the decision. Every decision is recorded in Reports.

With their owners

Each person who owns something open, with how many items they have and where it has got to: Not asked yet, Asked on a date, no decision yet (the date their Slack message was sent), Said they're fixing some, or Decided on all of it. Open shows their findings. A name mapped to an email on People shows as alex → alex@acme.com. The full list, with owner names, leaver reports and access reviews, is on People.

Biggest saving

The open waste item that costs the most a month, with what it is and a link straight to its fix in Everything found. It isn't shown when there's no open waste.

Money this month

Waste Strays has seen fixed this month, against what it found (still open, not kept or snoozed, plus fixed). The second line is the yearly cost if the rest stays. The "found" figure links to the Waste tab of Everything found. Waste you kept or snoozed is still being spent, so the card adds a line such as $204 a month kept or snoozed; Reports shows the same split, and its scan table counts kept and snoozed items too, because it is what each scan found. Prices are AWS's list prices, so they are estimates, not your bill.

Security

Open security risks by severity, how many were fixed this month, how many are new in the last 7 days and how old the oldest High risk is. Counts leave out anything kept or snoozed. New and fixed only mean something once an account has been scanned twice, so after the first scan the card says so instead of showing them.

The security counts and the "Needs you" number are different things: the counts cover every open risk, "Needs you" is only what nobody else can decide (see above).

Evidence pack

How many of the 15 Cyber Essentials answers are a clear Yes, and the next one to unlock: the question links to the findings that stand in its way. It uses the same rule as the Evidence page: a finding you kept or snoozed still counts against its answer, because an insurer asks whether the problem exists, not whether you accepted it. The card says how many kept or snoozed findings are holding answers back. How the evidence pack works.

Waste per month, by scan

One bar for each day with a scan, the last eight, once there are two or more. It shows whether waste is going down.