Home / Help centre / Results & findings
Results & findings
If two agents rate an issue differently, which severity wins?
The highest severity wins. When agents grade the same issue differently, Cyberlop merges the findings into one issue and gives it the highest severity of the group. Confidence is a separate field, so an uncertain finding can still carry a high severity.
The short version
Top rating wins. If one agent calls an issue Medium and another calls it High, you see one issue marked High. Cyberlop does not average the grades, and it does not pick the first one it sees.
How it works in Cyberlop
Several specialist agents may describe the same weakness, and each one may grade it a little differently from the others. Cyberlop first merges those findings into a single issue. During the merge it applies severity reconciliation: the merged issue takes the highest severity of the group. Which version of the text and evidence you see is a separate choice. That one is the version with the most evidence.
Severity and confidence answer different questions. Severity says how bad the issue would be if it is real. Confidence says how sure the scan is. Keeping the two apart means a shaky finding never hides a serious one.
| Field | Question it answers | Values |
|---|---|---|
| Severity | How serious is this? | Critical, High, Medium, Low, Informational, Best Practice |
| Confidence | How sure is the scan? | High, Medium, Low |
| Status | How well was it proven? | Confirmed, Likely, Unconfirmed |
That is why a Critical issue can carry Low confidence, and why you should read both before you act. The list dims the Low confidence value but leaves the severity badge alone.
What to do next
- Read the Evidence tab first. A request, a response and a screenshot, where the scan captured one, say more than any badge on the row can.
- If you think the severity is too high for your setting, record your reasoning in Notes. Then pick a disposition such as Accepted Risk and click Update status.
- To hide low-signal items in a report, set a minimum severity or minimum confidence in the profile's Reporting section.
The tutorial on severity and confidence covers both scales in more depth. See also why low confidence looks faded. Questions? Contact us.
Related questions
- What severity levels does Cyberlop use?
- Why do some confidence values look faded in the Issues list?
- How does Cyberlop avoid reporting the same issue twice?
- What's the difference between Confirmed, Likely and Unconfirmed?
- How do I set a minimum severity for a profile's report?
Severity vs confidence in Cyberlop: how to read and prioritise findings
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.