---
title: Manage infrastructure vulnerabilities as DevSecOps, Platform, or Security team
source: https://docs.newrelic.com/docs/vulnerability-management/infrastructure/manage-infrastructure-vulnerabilities
---

This document covers how to:

-   Calculate the vulnerability surface area of your infrastructure
-   Understand how runtime architecture of each host affects business risk, vulnerability and severity

If this workflow doesn't sound like you, check out our document on [monitoring vulnerabilities for a specific host](https://docs.newrelic.com/docs/vulnerability-management/infrastructure/monitor-host-security).

## View the vulnerability surface area of your infrastructure hosts [#vulnerability-area]

![An image showing the summary Security RX overview page.](https://docs.newrelic.com/images/security_screenshot-infra.webp "Security RX overview")

**[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Security RX**

Once vulnerability data starts flowing into New Relic, you can access your data through various scoped views. To view a summary of your infrastructure, navigate to the [Security RX > Security RX - Infrastructure page](https://one.newrelic.com/vulnerability-management/infra-summary). This page provides curated dashboards representing the vulnerability of your system and baseline security hygiene.

Dig deeper into the security of your system by auditing the vulnerability of all your active OS distributions and packages:

**Manage vulnerabilities for all your entities**

-   To review the vulnerability status of all your entities, from the **Security RX - Infrastructure > Overview** page, select **[Entities](https://one.newrelic.com/vulnerability-management/infra-entities)**. This view shows all your entities and allows you prioritize vulnerability remediation based on weighted vulnerabilities scores and severity profiles.

-   Click an entity to open up a **scoped entity** view. Learn more about our scoped entity view in our document on [monitoring host-level security](https://docs.newrelic.com/docs/vulnerability-management/infrastructure/monitor-host-security).

**Manage vulnerabilities for all your OS distributions**

-   In the **Security RX** page, under **Security RX - Infrastructure** section, select **Distributions** to review the security impact of all OS distributions in your system. This view shows all the distributions used by your services and their security impact through vulnerability counts and severity.

-   Click a distribution to view the current version and its associated vulnerabilities. This view shows all the vulnerabilities detected in the distribution and their severity profile.

    You can upgrade to the suggested distribution version to mitigate the vulnerabilities.

**Manage vulnerabilities for all your packages**

-   In the **Security RX** page, under **Security RX - Infrastructure** section, select **Packages** to review the security impact of all packages in your infrastructure. This view shows all the packages used by your services and their security impact through vulnerability counts and severity.

-   Click a package to view the current version  and its associated vulnerabilities. This view shows all the vulnerabilities detected in your packages and their severity profile.

    You can upgrade to the suggested package version to mitigate the vulnerabilities.

## What's next?

[Monitor host security](https://docs.newrelic.com/docs/vulnerability-management/infrastructure/monitor-host-security)

Drill down into specific hosts to see entity-level vulnerability details

[Manage vulnerability status](https://docs.newrelic.com/docs/vulnerability-management/advanced/manage-vulnerability-status)

Change status to Ignored, Affected, or Fixed for remediation tracking

[Set up alerts](https://docs.newrelic.com/docs/vulnerability-management/advanced/set-up-alerts)

Get notified when new infrastructure vulnerabilities are detected

[Query security data](https://docs.newrelic.com/docs/vulnerability-management/advanced/query-examples)

Build custom infrastructure security dashboards with NRQL