Home / Help centre / Results & findings
Results & findings
What's the difference between a finding's Status and its Triage state?
Status comes from the scan and says how well it proved the finding (Confirmed, Likely or Unconfirmed). Triage is the finding's place in your workflow (New, Regression, Fixed, False Positive or Accepted Risk). You change triage with the Disposition list. You cannot edit status.
The short version
Two labels, two jobs. One describes the evidence. The other describes what your team has done.
How it works in Cyberlop
| Status | Triage | |
|---|---|---|
| Question | How well was it proven? | What is happening to it? |
| Values | Confirmed, Likely, Unconfirmed | New, Regression, Fixed, False Positive, Accepted Risk |
| Where | Summary tab of the dialog | Triage column and chips on the list |
| Who sets it | The scan | The scan and your team |
Triage starts as New. A scan that no longer finds an issue marks it Fixed. If it returns, it becomes a Regression. Your team can also set Fixed, False Positive or Accepted Risk with the Disposition list.
The button reads Update status, which causes confusion. It saves the disposition, the assignee and the notes. The proof status on the Summary tab does not change.
What to do next
Use status to decide how much to trust a finding. Use triage to decide what to do with it. A Likely finding can be New. A Confirmed finding can sit under Accepted Risk.
See what Confirmed, Likely and Unconfirmed mean and what each triage state means. To change a state, follow how to change a finding's status. The triage tutorial has screenshots.
A mix-up between the two is common because the button says Update status, so remember that it saves your triage decision and leaves the proof grade alone. Think of it as saving your own decision about the finding, together with the owner and the notes you typed, and nothing more than that. Nothing more.
Related questions
- What's the difference between Confirmed, Likely and Unconfirmed?
- What do New, Regression, Fixed, False Positive and Accepted Risk mean?
- How do I change a finding's status?
- How does the Hiding / Showing only switch on the Issues page work?
- Will a finding I marked as a false positive come back on the next scan?
How to triage findings in Cyberlop: disposition, assignee and notes
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.