IT · Power BI template

Vulnerability Management Power BI template

Dark Power BI vulnerability management template: open findings by severity, remediation SLA, mean time to remediate, finding age and riskiest assets.

By · Founder & Reliability Engineer · Updated

Free for commercial use

Light version: same layout, colours re-solved and checked for WCAG AA contrast.

Vulnerability Management Power BI dashboard template: 5 KPI cards, 2 column charts, a bar chart, a table and 2 slicers on a 1280×720 page

BetaOpens in Power BI Desktop with 7 tables of sample data and every visual bound. See what’s inside

Free, no sign-up. The PBIP with sample data includes the background, theme and a README. 1920×1080 fits a new page in a Fluent 2 report; 1280×720 and 2× fit Classic pages. Downloads carry a small “Made with VizForge” mark (sign in to the studio to remove it).

Customise in the design studio →
Layout
Left nav rail, 5 KPIs, open-findings trend + SLA bars, age columns + riskiest-asset table
Page size
1280×720 px (16:9, Power BI default)
Theme
Graphite Mono

Open the sample-data PBIP in Power BI Desktop

Checked against Microsoft Learn's Power BI Desktop projects documentation (as of Nov 2026).

  1. 1

    Unzip to a short path and open the .pbip

    Extract the zip to a short local folder such as C:\PBI (Windows limits project paths to 260 characters, and Desktop can't save a project straight to OneDrive or SharePoint), then double-click the .pbip file or use File → Open in Power BI Desktop. Microsoft still lists projects and TMDL as preview features (as of Nov 2026): if Desktop won't open the project, go to File → Options and settings → Options → Preview features, tick “Power BI Project (.pbip) save option” and “Store semantic model using TMDL format”, then restart Desktop.

  2. 2

    Select Refresh once

    The project ships without the local data cache (.pbi/cache.abf), so Desktop opens the full model definition without data. Select Home → Refresh: every table is built from values written into its Power Query step, so there is no data source to sign in to.

  3. 3

    Save as .pbix or connect your data

    Use File → Save as to keep a single .pbix file, or open Transform data and replace each table's Source step with your own query, keeping the column names so the measures and visuals keep working.

What’s inside the Vulnerability Management sample model

Rendered from the same definition the download writes as TMDL, so this list always matches the file.

Tables
7
Fact rows
514
DAX measures
7

Vulnerability management for a fictional wholesaler's 40 servers, workstations, network devices and cloud VMs in four business units: 450 scanner findings detected March to October 2026 with severity, status, days to remediate against the severity's SLA and the age of open findings, plus a weekly count of open findings by severity. Units: Findings and assets; days.

Tables and columns

Calendar

Date table · 2026, one row per day

Date table generated in Power Query (List.Dates), marked as the model's date table.

  • Date (date)
  • Year (whole number)
  • Quarter (text)
  • Month (text)
  • Month Name (text)
  • Week Start (date)
  • Weekday (text)
  • Fiscal Year (text)

Business Unit

Dimension · 4 rows

Business units that own assets.

  • Business Unit (text)

Asset

Dimension · 40 rows

Scanned assets (fictional host names).

  • Asset (text)
  • Asset Type (text)
  • Business Unit (text)
  • Internet Facing (text)

Severity

Dimension · 4 rows

Severity with remediation SLA and a risk weight.

  • Severity (text)
  • SLA Days (whole number)
  • Risk Weight (whole number)

Age Band

Dimension · 4 rows

Age of open findings, in order.

  • Age Band (text)

Findings

Fact · 450 rows

One row per finding. Remediated date, days and SLA flag are blank unless remediated; Age Days and Age Band are set for findings still open or risk-accepted.

  • Finding ID (text)
  • Date (date)
  • Asset (text)
  • Severity (text)
  • Finding (text)
  • Status (text)
  • Remediated Date (date)
  • Days to Remediate (whole number)
  • Within SLA (whole number)
  • Age Days (whole number)
  • Age Band (text)

Open Snapshot

Fact · 64 rows

Open findings by severity at the start of each week.

  • Week (date)
  • Severity (text)
  • Open Findings (whole number)

Relationships

Many-to-one, single direction. Inactive relationships are switched on inside a measure with USERELATIONSHIP.

  • Findings[Date] → 'Calendar'[Date]
  • Findings[Asset] → Asset[Asset]
  • Asset[Business Unit] → 'Business Unit'[Business Unit]
  • Findings[Severity] → Severity[Severity]
  • Findings[Age Band] → 'Age Band'[Age Band]
  • 'Open Snapshot'[Week] → 'Calendar'[Date]
  • 'Open Snapshot'[Severity] → Severity[Severity]

DAX measures

All measures live in a dedicated Key Measures table. Copy any of them into your own model; rename the table and column references to match.

Open FindingsFindings not yet fixed or accepted.
Open Findings =
CALCULATE ( COUNTROWS ( Findings ), Findings[Status] = "Open" )

Format string: #,0

Critical & High OpenOpen findings rated critical or high.
Critical & High Open =
CALCULATE ( [Open Findings], Severity[Severity] IN { "Critical", "High" } )

Format string: #,0

Mean Time to RemediateAverage days from detection to fix.
Mean Time to Remediate =
AVERAGE ( Findings[Days to Remediate] )

Format string: 0

Remediated within SLA %Fixes completed within the severity's SLA.
Remediated within SLA % =
DIVIDE ( SUM ( Findings[Within SLA] ), CALCULATE ( COUNTROWS ( Findings ), Findings[Status] = "Remediated" ) )

Format string: 0%

Assets ScannedAssets with at least one finding in the period.
Assets Scanned =
DISTINCTCOUNT ( Findings[Asset] )

Format string: #,0

Risk ScoreOpen findings weighted by severity (10/5/2/1).
Risk Score =
SUMX ( FILTER ( Findings, Findings[Status] = "Open" ), RELATED ( Severity[Risk Weight] ) )

Format string: #,0

Open Findings (Weekly)Open findings at the start of the week.
Open Findings (Weekly) =
SUM ( 'Open Snapshot'[Open Findings] )

Format string: #,0

What each visual is bound to

The PBIP opens with these fields already on each visual.

Field bindings per visual
VisualFields
Business unitSlicer'Business Unit'[Business Unit]
Asset typeSlicerAsset[Asset Type]
Open findingsCard[Open Findings]
Critical & high openCard[Critical & High Open]
Mean time to remediate (days)Card[Mean Time to Remediate]
Remediated within SLACard[Remediated within SLA %]
Assets scannedCard[Assets Scanned]
Open findings by weekColumn chartCalendar[Week Start], [Open Findings (Weekly)], Severity[Severity]
SLA performance by severityBar chartSeverity[Severity], [Remediated within SLA %]
Age of open findingsColumn chart'Age Band'[Age Band], [Open Findings]
Riskiest assetsTableAsset[Asset], Asset[Asset Type], Asset[Internet Facing], [Risk Score], [Open Findings]

Questions this dashboard answers

Each one is answered by a visual on the page, from the sample model's own tables and measures.

About this dashboard layout

A vulnerability programme is judged on two things: whether the backlog of serious findings shrinks and whether fixes land within the agreed time. The cards show open findings, open critical and high findings, mean time to remediate, the share fixed within the severity's SLA, and assets with findings.

Open findings by week comes from a weekly snapshot table, stacked by severity, because the open count on a past date can't be rebuilt reliably from today's statuses once findings are reopened or re-scanned. SLA performance by severity runs from critical (7 days) to low (180 days), with the SLA stored on the Severity table so it can be changed in one place.

Age of open findings shows how much of the backlog is old; a large 180+ day band usually means risk-accepted findings that nobody revisits. The riskiest-assets table weights open findings by severity (10, 5, 2, 1) and flags internet-facing assets, which belong at the top of any patching list.

Finding titles are generic and host names are fictional; never publish real host names or vulnerability details outside the security team. The sample covers 450 findings on 40 assets over eight months.

Visuals on the page

Positions are Power BI page pixels. Enter them in Format → General → Properties → Size and position, or use the PBIP download where they are already set.

Visual positions in the Vulnerability Management template
VisualTypeXYWidthHeight
Business unitSlicer9202416040
Asset typeSlicer10962416040
Open findingsCard11212015264
Critical & high openCard35212015264
Mean time to remediate (days)Card59212014464
Remediated within SLACard82412014464
Assets scannedCard105612014464
Open findings by weekColumn chart112232656208
SLA performance by severityBar chart816232424208
Age of open findingsColumn chart112488432192
Riskiest assetsTable592488648192

Custom visuals for this layout

Built-in Power BI visuals cover most slots above. These slots also suit a custom visual; each page covers the data shape, DAX and a prompt to generate it as a .pbiviz.

Already have a report?

Brand Makeover tries Vulnerability Management first on every page of your Power BI project (.pbip zip) where it fits: the page's visuals have to go into its 9 data slots without overlaps. Pages it can't seat get another catalog layout or a brand grid. Queries, filters and bookmarks are left as they are. Free, in your browser.

Opens with the Analyst / Dense preset, because the Executive preset doesn't use this layout (9 data slots; this preset uses templates with at most 7).

Restyle my report into this

Swap a slot for a custom visual

Pick any slot and VizForge AI writes a custom visual (.pbiviz, with TypeScript source) sized to it, in this template's colours and shaped for the fields it is bound to.

Generate one that fits this layout.

Card · 152×64 px · bound to [Open Findings]

1, 2 or 5 credits depending on the brief · 5 free on signup. Sign in or create a free account on the next screen; the brief is saved for 30 minutes.

Brief sent to the generator (you can edit it there)

A Power BI card visual titled "Open findings". It sits in a 152×64 px slot on a designed report page. Match the report's brand: data colours #ECECEE, #C8C8CF, #A4A4AE, #80808C, #686873, #696973; background #1C1C20; text #ECECEE; font Segoe UI. Transparent visual background so the page design shows through; no visual border. In the sample model it is bound to [Open Findings]; keep the same data roles so the fields drop straight in.

Not sure what to build? Browse the visual catalog or open the template in the design studio and hand off any slot from there. Or start in the AI generator with a blank brief.

Colours and theme

Graphite Mono

Dark monochrome Power BI theme: grey-scale data steps with one copper highlight on graphite, for ranked bars, cohort tables and quiet executive dashboards.

See the Graphite Mono palette and contrast checks →

Use the background in an existing report

Prefer to keep your own report? Apply the design to it instead of opening the PBIP.

  1. 1

    Download the background

    Take the 1920×1080 PNG for a new page in a Fluent 2 report (the default size for new pages), or the 2× PNG (2560×1440) for sharp text on a 1280×720 Classic page. Power BI scales the image to the canvas.

  2. 2

    Set the canvas background

    Format page → Canvas background → Browse. Set Image fit to Fill and transparency to 0%.

  3. 3

    Import the theme

    Design ribbon → Import theme (in the Power BI service: View → Theme pane), then pick the downloaded JSON. Data colours and fonts now match the design. Older Desktop builds: View → Themes → Browse for themes.

  4. 4

    Place your visuals

    Size each visual to the positions above with background and border off, or open the PBIP project where they are already placed.

Questions about this template

Does the Vulnerability Management template come with sample data?

Yes. The “PBIP with sample data” download contains a semantic model with 7 tables and 7 DAX measures, and every visual on the page is already bound to it. The sample: Vulnerability management for a fictional wholesaler's 40 servers, workstations, network devices and cloud VMs in four business units: 450 scanner findings detected March to October 2026 with severity, status, days to remediate against the severity's SLA and the age of open findings, plus a weekly count of open findings by severity. The data is written into each table's Power Query step, so there is no data source or sign-in.

Is it a .pbix file?

It is a Power BI project (PBIP): a folder of text files that Power BI Desktop opens like a .pbix. Open the .pbip file, select Refresh once to load the sample rows, then use File → Save as if you want a single .pbix.

What visuals are in the Vulnerability Management template?

The page has 11 visual areas: 2 slicers, 5 cards, 2 column charts, 1 bar chart, 1 table. Their exact positions are listed on this page so you can match them in Power BI's Format → General → Properties panel, or skip that step by downloading the PBIP project.

Which theme does the Vulnerability Management template use?

It ships with the Graphite Mono theme (dark tone). Download the theme JSON here, or open the template in the design studio and switch to any other theme or your own brand colours.

Is there a light version of the Vulnerability Management template?

Yes. Switch the preview to Light and every download (background, theme JSON and PBIP) comes in that version. The layout is identical; the page, card and text colours are re-solved for a light page, and the accent, status and data colours keep their hues but are adjusted until text meets WCAG AA (4.5:1) and chart colours reach 3:1 against the cards.

How do I use the background image in Power BI Desktop?

Select the page, open Format page → Canvas background, choose Browse and pick the PNG, then set Image fit to Fill and transparency to 0%. Give your visuals a transparent background and no border so the designed panels show through.

Can I open the PBIP project in Power BI Desktop?

Yes. PBIR is the default report format in Power BI Desktop since September 2026, and the download is a PBIP project: unzip it and open the .pbip file, select Refresh once and the sample data loads into visuals that are already bound (the empty PBIP leaves the containers unbound for your own data). Microsoft still lists projects and TMDL as preview features (as of Nov 2026), so if Desktop won't open it, enable them under File → Options and settings → Options → Preview features.

Build guides for this dashboard

Guides to the same dashboard job: which custom visuals it needs, the DAX behind them and prompts to generate them.

KPI cards for this layout

Headline numbers drawn by one DAX SVG measure each, for the Card visual or a table row.

Want the headline numbers to look like cards rather than plain values? Browse the KPI card gallery or build your own in the SVG measure builder.

Related templates

Keep exploring

Dashboard templates

61 hand-designed Power BI page layouts by department.

Power BI themes

80 contrast-checked theme JSON files, light and dark.

Background images

Page backgrounds at 1280×720 and 1920×1080 with visual positions.

Power BI icons

3,034 icons in 40 categories as SVG, PNG, DAX or theme icon JSON.

Make the Vulnerability Management template yours

Swap in your brand colours and logo, move panels, add icons and generate missing visuals with AI, then export the background, theme JSON and PBIP project.

Open in the design studio →Browse templates

The design studio for Power BI. Free, in your browser, no sign-up.