Finding

What is Finding?

In vulnerability management, a finding is the raw output from a scanner — a specific detection of a potential security issue on a specific asset during a specific scan. Multiple findings across scans may relate to the same underlying vulnerability. Findings are grouped into issues for tracking and remediation. Each finding includes details like severity, CVSS score, affected URL or port, scanner name, and remediation guidance.