Home / Help centre / Reports & exports
Reports & exports
How do minimum severity and minimum confidence affect my report?
Minimum severity and minimum confidence are filters in a scan profile's Reporting section. When the final reporting agent builds the report, it keeps only findings that meet both levels. Set them to No minimum to see everything the scan proved.
The short version
Think of the two settings as a sieve for the report, with two questions. Severity asks how bad a finding could be. Confidence asks how sure the scan is that the finding is real. A finding must clear both.
How it works in Cyberlop
Both fields sit in the Reporting section of a scan profile, under Report filters. The profile form is also where you add report guidance and rules of engagement.
| Setting | Choices |
|---|---|
| Minimum severity | No minimum, Critical, High, Medium, Low, Informational, Best Practice |
| Minimum confidence | No minimum, High, Medium, Low |
The in-app guide says the final reporting agent builds an executive-level report from the confirmed findings, filtered by these two settings and by any report guidance. A minimum severity of High would keep High and Critical findings and drop the rest. Setting confidence to High keeps only the findings the scan is most sure about, which gives a shorter report that is easier to act on but may hide leads that deserve a second look.
Severity and confidence are separate ideas. A Critical finding can still have Low confidence, and a Low severity finding can be fully proven. That is why there are two dials, not one.
The mode you choose on Download report adds another cut on top. It decides whether open, fixed or accepted findings appear. Read the three report options for that part.
What to do next
- For a client report, try a minimum severity of Medium and a minimum confidence of Medium.
- For an internal clean-up, choose No minimum for both, so nothing is hidden.
- Edit the profile, save it, then run a new scan to use the new filters.
The capture does not show whether an older report is rebuilt after you change a filter, so plan on the next scan. Need a hand choosing levels? contact us.
Related questions
- How do I set a minimum severity for a profile's report?
- How do I leave low-confidence findings out of the report?
- Why does my report list fewer findings than the scan's Findings tab?
- What severity levels does Cyberlop use?
- What's the difference between Confirmed, Likely and Unconfirmed?
Reporting rules in Cyberlop: severity, confidence, guidance and PII redaction
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.