Home / Help centre / Results & findings
Results & findings
Which scan does the Diff tab compare against?
The Diff tab compares the scan you are viewing with the previous completed scan of the same target. It sorts findings into three columns: New, Fixed and Regressed. On a first scan there is nothing to compare, so the tab says so.
The short version
The baseline is the last completed scan of the target before this one. The tab header says it plainly: Compared to previous completed scan. A failed or cancelled run does not count as a completed scan, so Cyberlop skips over it and looks further back for the last run that finished properly.
How it works in Cyberlop
Open a scan from Recent Scans and click the Diff tab. You see three columns:
| Column | Colour | Meaning |
|---|---|---|
| New | Red | Found in this scan, not in the baseline |
| Fixed | Green | Present in the baseline, no longer found |
| Regressed | Amber | Fixed before, and back again |
Every column shows a count. Under it, findings appear as a severity badge and a title. When a column is long, the list is cut short and ends with a line such as "+46 more".
The baseline follows the target, so it can come from a different profile of the same target, which is worth keeping in mind whenever you compare two runs. If the two scans used different classes or a different exploitation setting, some differences come from the settings, not from your code.
What to do next
- For a clean comparison, run the same profile each time. A schedule does this for you.
- Check the Regressed column first. Those are issues you had already fixed, which makes them the most urgent items on the page.
- Use the Fixed column to confirm a patch worked. Read how to confirm a fix for the steps.
The first scan of a target has no baseline. That case is covered in why Diff says there is no previous scan. For more depth, see the compare scans tutorial.
Related questions
- How do I compare a scan with the previous one?
- Why does the Diff tab say "No previous scan to compare against."?
- How do I find findings that came back after being fixed?
- How do I confirm my fixes worked?
- The Diff tab says "+46 more". Where are the rest of the findings?
How to compare scans in Cyberlop with the Diff tab
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.