Severity
Measures potential impact, not the real probability of exploitation.
GUIDE
Vulnerability scanning: understanding findings and false positives.
A scan is a technical snapshot at a point in time. Its value depends on coverage, evidence quality, prioritisation and the ability to replay checks after remediation.
✓ Authorised scope✓ Bounded tests✓ Actionable report✓ Retesting
Reading scan results
Confidence
Separates indicative signals from confirmed findings.
Context
The same weakness has different impact on a test site and a public business application.
Remediation
The fix should be precise, verifiable and appropriate to the affected technology.
Retest
A vulnerability is truly closed only after the remediation is verified.
History
Recurring scans reveal regressions and new exposure.