Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Results & findings

Results & findings

How do I see who changed a finding's status?

Quick answer

Open Activity in the sidebar and search for Triage. Each Triage · Issue entry names the actor on the left, then the status change such as new to fixed, the finding, the assignee and severity, with a timestamp. What you see depends on your permissions.

The Activity page is an audit-style feed. Every status change on a finding leaves an entry there.

Steps

  1. Click Activity in the sidebar.
  2. Click the search box. It reads Search by actor, action, or entity....
  3. Type Triage, or a word from the finding title.
  4. Open the matching Triage · Issue entry.

Good to know

Each entry has four parts.

PartShows
Left sideThe actor: a user email, a support name, or a system chip
TitleAction and entity, such as Triage · Issue
ChipsStatus (for example new → fixed), Finding, Assignee, Severity
FooterTimestamp and a short entity ID

Entries run newest first. Use them to answer questions like who closed a finding, when, and who it was given to.

The feed has permission keys of its own: activity:read, activity:read_team and activity:read_all. They decide how much of the workspace you can see. If you cannot find an entry you expect, your role may only show your own actions. Ask an admin to check, or write to /contact.

The finding's own dialog shows the current disposition and assignee, but not the history. That is why Activity is the place to go for the who and the when.

Read the activity feed tutorial for the other entry types. The glossary term audit log explains why such a feed matters.

This trail is useful in reviews and audits, since it shows a decision, who made it and when, without anyone having to remember it. Search by finding title for a full history. It all lives in one feed.

Full tutorial

Cyberlop activity feed: what it records and how to use it for audits

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.