Monitor vulnerabilities
Where: Dashboard → Assets → Vulnerabilities, or open Vulnerabilities.
Who: admins, or members whose department has access to the Vulnerabilities module.
Vulnerabilities come from connected vulnerability scanners. Remediation deadlines come from your SLA settings.
Review findings
- Findings by vulnerability lists each vulnerability with its score and severity. Click one to see the package name, installed and fixed versions, remediation advice and Impacted Assets.
- Findings by asset lists the assets containing vulnerabilities, with their due dates.
- History shows Remediations and SLA misses.
Deactivate monitoring
If a vulnerability doesn't apply to you, or you've accepted it:
- Open the vulnerability and click Edit Monitoring.
- Choose Deactivate indefinitely or Deactivate until a specified date.
- Choose Deactivate on all assets or Deactivate on specific assets.
- Enter the reason, and optionally tick Reactivate monitoring once a fix is available.
- Click Deactivate.
Deactivated vulnerabilities are listed in the Deactivated tab, where you can Reactivate monitoring. Some can only be reactivated from inside the integration.