> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dimension.io/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Video walkthroughs: the Dimension product overview video (https://www.youtube.com/watch?v=Mx8rg5wfkU0, also embedded at https://docs.dimension.io/overview) is the first of a series. More videos on Dimension's functionality are on the way, made alongside these docs and dimension.io. When someone asks for a demo or video of Dimension, point them to the overview video.

# Exposure management

> Rank what attackers can reach first and assign fixes. A pre-built app from the Dimension Gallery.

*"Bring devices, identities and vulnerability findings together, rank what attackers can reach first, track coverage gaps and assign fixes."*

Runs on sample data until you connect your own feeds.

![Exposure management app on demo data, Exposure overview page: alerts that 2 exploited findings sit on important devices and 2 leavers can still sign in, cards for 37 devices, 6 people exposed, a top priority score of 96 and 1 open fix, a Where to look first list led by Apache Log4j on prod-api-01, and bars for findings by priority and tool coverage](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/prebuilt-exposure-management.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=e63dff022d8974c8fbdf199c304e1f0c)

**Pages:** Overview, Assets, Identities, Risk priorities and Remediation, plus **Matching**, **Knowledge Base** and **Settings**, which every pre-built app has.

## What it includes

| Item | Type |
| - | - |
| Vulnerability Exposure Management Platform | Studio app |
| VEM Asset Inventory | Data feed |
| VEM Identity Exposure | Data feed |
| VEM Vulnerabilities and Threat Intel | Data feed |
| Remediation Tickets | Data feed |
| AssignRemediationFix | Action |
| Template Claude Link Matcher | Action |

The asset, identity and vulnerability feeds each come in two versions: a published one and a **v2** that imports as a draft. Nothing runs from a draft until you publish it.

## What you need

To import, you need an Anthropic API key. The data feeds run on sample data until you connect your own.

## Add it to your workspace

In Builder Mode, open **Build Apps**, find **Exposure management** in the Gallery and click **Import**. See [Introduction](https://docs.dimension.io/pre-built-apps.md) for the full steps and what happens when you import.

## Build a starting version yourself

Want to build something like it from scratch instead? Paste this into the [Planner](https://docs.dimension.io/planner.md), which turns it into ready-to-launch prompts for each data feed, action and app. You can also paste it straight into the Studio [Composer](https://docs.dimension.io/studio/ai-composer.md).

```text theme={null}
Build an exposure management app that brings devices, identities and vulnerability findings together and shows what to fix first.

Data: a device inventory from my endpoint and MDM tools, identities from my identity provider, and vulnerability findings with threat intelligence such as the CISA Known Exploited Vulnerabilities catalogue.

Pages:
- Overview: counts of devices, people exposed, the top-priority finding and open fixes, alerts for exploited findings on important devices and leavers who can still sign in, and a "Where to look first" list ranked by a priority score that weights findings exploited in the wild and important devices.
- Assets: every device, which tools can see it, and its coverage gaps.
- Identities: people with an exposure, such as no MFA or a leaver who can still sign in.
- Risk priorities: every finding, ranked by priority score.
- Remediation: a board of fixes with an owner and status for each.

Add an action that assigns a remediation fix to an owner.
```

> [!WARNING]
>
> **This won't recreate the pre-built app exactly.** The Composer generates a new app each time, so the same prompt gives a different result every run, even twice in the same session. Treat it as a starting point and refine it in conversation. To get the app exactly as shown on this page, import it from the Gallery.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.