Findings FAQs¶

Findings

General¶

Where do findings come from?¶

Findings are detected by your connected integrations — cloud scanners, code analysis tools, vulnerability scanners, and more. See Integrations.

Can I add findings manually?¶

Findings are generated automatically from connected tools. Manual input is not the primary workflow.

How often are findings updated?¶

Each integration syncs on its own schedule. Most update within minutes to a few hours. Check Settings → Integrations for sync status.

Triage¶

How should I prioritize findings?¶

Start with Critical severity, then consider blast radius (how many assets are affected) and compliance impact (linked controls). Common Remediations also prioritize by impact.

Can I assign findings to team members?¶

Yes. Assign findings during triage so ownership is clear.

What does "Accepted Risk" mean?¶

When a finding is acknowledged but intentionally not fixed (e.g. compensating controls exist), mark it as Accepted Risk with justification for audit purposes.

Remediation¶

What's the difference between Findings and Common Remediations?¶

Findings are individual issues. Common Remediations group fixes that resolve multiple findings at once.

Will resolved findings come back?¶

If the underlying issue is fixed, the finding stays resolved. If the issue reappears on the next sync, the finding reopens.

Can the AI help me fix a finding?¶

Yes. Open a finding and ask the AI Assistant for an explanation and step-by-step remediation guidance.