Read findings and action items

How findings are organized, what severity means, and where remediation steps live.

Last updated 2026-05-11 Scope

Your dashboard lists every finding we discovered, grouped by severity. Each finding has three parts: what the exposure is, why it matters, and what to do about it.

Severity levels

  • Critical — active credential exposure, exploitable infrastructure, or impersonation domain registered.
  • High — exposed data that requires rotation or hardening within days.
  • Medium — exposure that should be addressed in the next quarter.
  • Low — historical or informational. Useful for record-keeping.

Action items per finding

Each finding has buttons in the dashboard:

  • I've done this — marks the finding as fixed on your side.
  • Reverify — re-checks the original source. Result becomes Resolved, Mitigated, or Still present.
  • Forward to IT — emails the finding details to whoever handles your tech.

Historical findings cannot be removed

Some breach-corpus findings (an old leaked password, for example) cannot be "removed" — they are historical record. Reverify marks these as Mitigated once you have rotated the affected credential.

Did this answer your question? If not, the AI assistant in the bottom-right can help, or email [email protected].