Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Results & findings

Results & findings

How do I mark a finding as accepted risk?

Quick answer

Open the finding, set Disposition to Accepted Risk, record who accepted it and why in Notes, and click Update status. The finding stays in your history, and you can include accepted issues in a report from the Download report menu.

Steps

  1. Find the finding on Issues or on a scan's Findings tab.
  2. From the Disposition menu, pick Accepted Risk.
  3. If it helps, use Assignee to name the person who owns the decision.
  4. Type the reason in Notes, saying who agreed, what makes the risk acceptable for now, and when your team plans to look at it again. Be specific.
  5. Click Update status.

Good to know

Accepted risk means the problem is real, and your team chose to leave it in place for now. That differs from a false positive, where there was no problem at all. Because this is a business decision, the note matters more than usual. A future reader, such as an auditor, needs to know who decided and on what grounds.

You want toDo this
Record a decision to live with a real issueSet the disposition to Accepted Risk.
Say the finding is wrongUse False Positive instead.
Show accepted items in a reportChoose Include fixed & accepted in the Download report menu.
Change your mindSet the disposition back to Open (reopen).

Dispositions are respected across future scans. The Activity feed logs the change as a Triage · Issue entry. Read how to include fixed and accepted issues in a report if an auditor needs to see them.

The Knowledge Hub explains risk acceptance in plain words. For the other dispositions, see how to change a finding's status.

Full tutorial

How to triage findings in Cyberlop: disposition, assignee and notes

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.