Findings Page

Overview

A security finding is generated when a security tool uncovers the issue it is designed to detect. Depending on the security tool, this can be anything from secrets in source code to an infrastructure-as-code misconfiguration. The findings tab enables security champions to view detailed information on these security findings. Findings from all security requirements display in a vertical list.

Filtering findings

You can filter the findings list by selecting parameters in the widgets at the top of the page, or by modifying the applied filters list by selecting filter options from the Add Filter + drop-down. Select Clear Filter to return to the complete list of findings. You can also name and save filter combinations for clear, consistent monitoring of your organization's security stance. The default filter displays whenever you navigate to the findings page after logging in to a new session.

To save a filter:

  1. Select the Save button.
  2. Enter a Name and Description for this filter.
  3. Select Create.

To edit a saved filter:

  1. From the search bar, select the filter you wish to modify.
  2. Select the menu icon adjacent to the filter name.
  3. Select Edit.
  4. Modify the Name and Description fields as desired.
  5. Select Save.

To designate a default filter:

  1. From the search bar, select the filter you wish to modify.
  2. Select the menu icon adjacent to the filter name.
  3. Select Set as default.

Viewing finding details

It is possible to take a more in-depth look at the contents of a finding than what is visible from the table.

To view the details of a specific finding:
Select the individual finding you wish to view. Details display in a panel on the far right side of the page.

📘

Findings Detail Panel

  • Plan Context ⁠— The layer, the security requirement, the security tool used by the plan, and the relevant asset type.
  • Finding Context ⁠— Specific information about where the finding was located.
  • Details ⁠— Depending on the security tool, a code sample may be provided.

Copying finding data to the clipboard

From the findings detail panel, select the copy icon (located to the right of the Status dropdown) to copy the contents of this panel to the clipboard. This is useful for recording findings into an issue-tracking system.

Changing finding status

Jit enables you to set findings to either open or ignore for easy management within your organization. To change the status of a finding, use the drop-down under the status column for the finding you wish to update.

📘

Note:

Finding status can also be changed from within the findings detail panel.

Exporting finding data

Jit enables you to export your finding data as a CSV file. To do this, select the Export CSV button to begin the download.


Did this page help you?