Vulnerabilities & findings

The Vulnerabilities view is the single place to triage everything SecNxt finds, regardless of which engine produced it. Each finding has a severity, status, affected asset and verification tier.

This is where day-to-day remediation work happens: filter, prioritise, assign, fix, and confirm.

Findings from every engine are normalised into one model, so you triage code, dependency, web, API, mobile and cloud issues side by side.

Verification tiers (detected / verified / human-confirmed) and AI prioritisation help you trust and order the list.

Status tracking records the lifecycle of each issue from open through fixed and retested.

1. 1Open Vulnerabilities from the sidebar.
2. 2Filter by severity, status, asset or verification tier to focus.
3. 3Open a finding to read the detail, evidence and remediation guidance.
4. 4Update status as you work and re-scan to confirm fixes.

• Running a remediation sprint across mixed issue types.
• Reporting on open vs resolved risk to stakeholders.
• Focusing engineers on confirmed, high-impact issues only.

• Start with high-severity, human-confirmed findings for the best return on effort.
• Use filters to carve the list into per-team or per-asset work queues.

What do the verification tiers mean?

Detected = raw tool output; verified = automatically corroborated; human-confirmed = an analyst validated it. Higher tiers mean higher confidence.