Security Magi

Magi dashboard for care360

The Problem

Government websites and services handle sensitive citizen information - from personal details to financial data. When security vulnerabilities exist in these systems, they put citizens at risk of data breaches, identity theft, and service disruptions.

Currently, when security tools detect potential threats across OGP's digital services, all alerts go to a central security team who must then figure out which product team should handle each issue. This creates delays in fixing problems and overwhelms the security team, especially across our 40+ digital products. Meanwhile, the product teams who best understand their systems and can fix issues fastest often don't know problems exist until much later.

What We Built

Magi is a dashboard that gives each product team direct visibility into security issues affecting their specific service. Instead of security alerts getting lost in a central queue, teams can now see:

• Vulnerability testing status: Whether their service needs security testing and when it was last completed

• Code security issues: Problems detected in their software code that could be exploited by attackers

• Cloud security risks: Threats to the systems that run their services online

• Third-party software vulnerabilities: Security problems in external tools their service depends on

The dashboard shows each team exactly what needs attention and helps them prioritise fixes based on risk to citizens.

Why This Matters for Citizens

Faster security fixes mean:

• Better protection of personal data when using government services

• Reduced risk of service outages caused by cyber attacks

• More reliable access to essential government services

• Greater confidence that citizen information is being properly safeguarded

When product teams can see and act on security issues directly, problems get resolved in days rather than weeks, reducing the window of risk for citizens using these services.

Current Status and Next Steps

Magi is currently being tested with select product teams to measure whether direct visibility leads to faster resolution of security issues. We're tracking how quickly teams respond to alerts and gathering feedback on the dashboard's usefulness.

The pilot will help us determine if this approach should be expanded across all OGP products to create a more responsive security culture that better protects citizens using government digital services.