Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Results & findings

Results & findings

How do I see the full details of a finding?

Quick answer

Click a finding's row on the Issues page, or on a scan's Findings tab. A dialog opens over the list with two tabs. Summary holds severity, confidence, class, location and description. Evidence holds the proof. Close it with Close or the cross, and the page behind stays put.

Steps

  1. Click Issues in the sidebar, or open a scan and go to its Findings tab.
  2. Find the finding. Use the search box (Search findings by title or location...) or the filter dropdowns if the list is long.
  3. Click anywhere on its row. The details open in a dialog over the list.
  4. Read the Summary tab for the description and the key facts, including where in the app or the code the problem sits.
  5. Click the Evidence tab for the proof.
  6. Click Close or the cross when you are done. Easy.

Good to know

The address in your browser does not change when the dialog opens, because it sits on top of the list. Both places open the same dialog, so what you learn in one carries over to the other, and you never have to learn two layouts.

On the Summary tabWhat it tells you
Severity badgeHow serious the finding is, from Critical down to Best Practice.
ConfidenceHigh, Medium or Low.
ClassThe vulnerability class, such as Injection or Authz.
StatusHow well the finding was proven: Confirmed or Likely.
Finding IDA class prefix and a number, such as INJ-VULN-02.
LocationThe endpoint for a black-box finding, or the source file and line range for a white-box one.
DescriptionWhat is wrong and how it was reached.

Status and the triage state are different things. Status says how strongly the finding was proven, while triage records what your team decided to do about it.

For a full tour of the dialog, read how to read a finding. The severity rating is explained in the Knowledge Hub.

Full tutorial

How to read a finding in Cyberlop: Summary and Evidence

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.