Findings

A finding represents a potential security vulnerability or weakness identified during a security assessment. These assessments can encompass various methodologies, including:

• Penetration Tests: In-depth manual assessments where security experts simulate real-world attacks to uncover vulnerabilities.
• Secure Code Reviews: Manual analysis of source code to detect security vulnerabilities early in the software development lifecycle.
• Digital Risk Assessments: Evaluations of your online presence to identify potential threats to your brand reputation, data security, and compliance.
• DAST Scans: Automated scans that analyze running web applications and APIs to identify security flaws.
• Attack Surface Scans: Insights derived from continuous attack surface monitoring, which automatically discovers and tracks your internet-facing assets for potential risks.

Regardless of the test type, findings detail the identified vulnerability, its potential impact, and recommendations for remediation. This information empowers you to prioritize and address security gaps effectively.

Organization View

To view all findings reported within your organization, navigate to the Findings page. You need an Organization Owner or Member role to view this page.

Here, you can filter findings by:

• Finding severity level
• Finding state
• Test type
• Associated assets
• Associated pentests
• Vulnerability type, from criteria such as the OWASP Top 10 list
• Retest end date

You can download findings in a CSV file based on applied filters.