How Findings Work¶
Findings
Understanding how findings appear in Satark AI and how to work through them effectively.
The findings lifecycle¶
Connect Integration → Scan / Sync → Finding Detected → Triage → Remediate → Resolved
1. Detection¶
When you connect an integration (e.g. AWS, GitHub, Snyk), Satark AI periodically syncs with that tool. Security issues detected during sync appear as findings in your organization.
2. Normalization¶
Findings from different tools use different formats. Satark AI normalizes them into a consistent structure — so a misconfigured S3 bucket and a vulnerable dependency look the same in your list, with severity, source, and status.
3. Triage¶
Your team reviews findings in the Findings module:
- Filter by severity, source, status, or date
- Sort by priority, blast radius, or compliance impact
- Assign findings to team members
- Ask the AI for explanations and remediation guidance
4. Remediation¶
Apply the recommended fix in your environment (e.g. enable MFA, patch a dependency, fix a cloud misconfiguration). Mark the finding as In Progress while working on it.
5. Resolution¶
Once fixed, mark the finding as Resolved. On the next sync, Satark AI verifies the issue is no longer detected. If it persists, the finding reopens.
Prioritization¶
Satark AI helps you focus on what matters most:
| Factor | Why it matters |
|---|---|
| Severity | Critical findings pose immediate risk |
| Blast radius | Issues affecting many assets or users rank higher |
| Compliance impact | Findings linked to violated controls need faster resolution |
| Common remediations | Fixes that resolve multiple findings at once save time |
AI-powered triage¶
The AI Assistant can explain any finding in plain language, suggest remediation steps, and connect findings to compliance controls — without leaving the platform.
Related¶
- Common Remediations — Batch fixes
- Integrations — Connect more data sources
- Compliance → Regulatory Defensibility — Findings linked to controls