Reporting by ownership group

[SCO (scor)]

Take a look at what I wrote here:

Queries for Remediation Projects

This is not a feature of the tool and indeed a gap that we see in larger organizations. On a host level, you can tag assets (e.g. owners). The challenge is that on a vulnerability level, it is not document specifically whether this is infra/db/webstack etc. This mapping needs to be done manually, in line with how your organization internally divides it stack in the teams. This will be different for each organisation. You could use the list of vulnerability categories (https://host:3780/vulnera…

So to reply to your question; yes this is the way to go, but your Network team or Application team will see all vulnerabilities of the host to which the are owner, unless you map vulnerability categories to a stack, but this solution is not scalable.