Home / Help centre / Results & findings
Results & findings
How do I see only one vulnerability class, like Injection?
On the Issues page, open the third dropdown (All classes) and pick a class such as Injection, Xss or Authz. The table then lists only findings of that class. Choose All classes to clear it. The class is also a column in the table.
Every finding belongs to a vulnerability class. The Issues page lets you view one class at a time.
Steps
- Click Issues in the sidebar.
- Open the dropdown that reads All classes.
- Choose the class you want, such as Injection.
- Only that class remains. Check the Class column to confirm.
Good to know
The list offers these classes:
| Class | Covers |
|---|---|
| Injection | SQL, NoSQL, command and template injection, and similar. |
| Xss | Reflected, stored and DOM cross-site scripting. |
| Auth | Login, session, MFA, OAuth and token handling. |
| Authz | Access control, such as one account reading another's data. |
| Ssrf | Server-side request forgery. |
| Crypto | Weak keys, wrong algorithms, unsafe comparisons. |
| Config | Headers, CORS, cookies, TLS, error detail. |
| Business-logic | Pricing, quota, replay and workflow flaws. |
| Dependency | Vulnerable libraries. |
| Secrets | Credentials and keys in the wrong place. |
The in-app documentation describes eight specialist areas that analyse code. The filter list is wider, because it also includes Dependency and Secrets.
Each finding sits in the lane it came from. Each lane stays separate so the same weakness is not reported many times. An injection issue shows up once, not under several classes.
When you start a profile, you can also choose which classes to scan. If a class never appears, check the profile's Scope section.
Filtering by class is handy when one developer owns one area, because the person who looks after login code can work through Auth findings while a colleague takes Injection. Share the filtered view with the owner of that code, and agree who takes which class before the sprint starts so that nothing is picked up twice or missed. Split the work.
Related questions
- How do I see findings for just one target?
- How do I filter findings by confidence?
- How do I show only critical findings?
- How do I search findings by title or file location?
- What's the difference between the Issues page and a scan's Findings tab?
How to search and filter vulnerability findings on the Issues page
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.