How do I set a minimum severity for a profile's report?

Steps

1. Find the profile. Use the pencil icon on its row in Scan Profiles, or start a new profile.
2. Switch to Reporting. Choose Reporting in the left-hand switcher. Its subtitle reads "Report filters, context & engagement".
3. Choose a severity. Select a level from the Minimum severity list.
4. Save. Click Save in the footer.
5. Run a scan. Press ▷ Scan and read the report when it finishes.

Good to know

The list offers No minimum, Critical, High, Medium, Low, Informational and Best Practice. No minimum is the default. The reporting agent filters findings by this level, together with the minimum confidence you set, when it builds the report.

A higher floor gives a shorter, sharper report, which suits an executive summary. A lower floor gives more detail, which suits engineers fixing issues. Many teams start with no minimum on the first scan so they see everything, then raise the floor once the noise is clear.

Severity and confidence are separate ideas. Severity says how bad a flaw could be, and confidence says how sure the scan is. Read more in how to set a minimum confidence. The two filters work together, so a finding must clear both to reach the report. The two filters work together, so a finding must clear both to reach the report. For the full picture, see the severity and confidence guide.

Questions? Write to /contact.

Related questions

• How do I leave low-confidence findings out of the report?
• How do I steer how the final report is written?
• Why does my report list fewer findings than the scan's Findings tab?
• How do I add rules of engagement, such as no destructive payloads in production?
• How do I fill in the Application context for a profile?

Full tutorial

Reporting rules in Cyberlop: severity, confidence, guidance and PII redaction

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre