Carried Over Findings

Configure integration behavior for carried over findings

What is a Carried-Over Finding?

When you conduct a pentest on an asset that still has unfixed findings from a previous pentest, pentesters can “carry over” the findings to the new pentest. When the pentester carries over the finding, the original finding’s state will be set to “Carried Over”.

Default Integration Behavior for Carried-Over Findings

By default, ticketing integrations will treat carried over findings as new findings. This means that your integration will create a new ticket for the carried over finding regardless of the existence of a ticket for the original finding.

Avoid Creating New Tickets for Carried-Over Findings

If you do not want your integration to create a new ticket for a carried-over finding when a ticket already exists for the original finding, you can configure your integration to use the alternative carry-over handling logic.

Global Configuration for New Pentests

By following the steps below, you can configure the default carry-over finding handling behavior of your integrations for all newly created pentests. This configuration change will not apply to pentests that have already been created.

1. Navigate to the Integrations page using the main Cobalt navigation bar
2. Locate the “Default Integration Settings” section within the Integrations page
3. Click the gear icon

4. Click the radio button for the “Re-associate existing ticket” option

5. Click save

Pentest-specific Configuration

By following the steps below, you can configure the carry-over finding handling behavior of your integrations for a single pentest.

1. Navigate to the pentest in the Cobalt UI
2. Navigate to the Integrations tab
3. In the “Ticket creation for carry over findings” section, click the radio button for the “Re-associate existing ticket” option
4. Click save

What Does Re-associating the Existing Ticket Do?

When the carried over finding is moved to the Pending Fix state, the following will happen:

1. The ticket will be unlinked from the original finding
2. The ticket will be linked to the carried over finding

Which Integrations Are Supported?

• Native Jira Cloud integration
• Native Jira Data Center (server) integration
• Integration Builder External Ticket References