Findings

Findings are groups of significant exposures with the same root cause.

You can promote one or more vulnerabilities from a finding into a runZero issue for tracking and remediation, and optionally push the issue to Jira as an external ticket.

Findings come from three sources:

1. Query-based findings come from specific queries defined within the system (see list above).

2. Nuclei-generated findings come from scans with default credentials and vulnerability checks enabled, using Nuclei templates (see templates).

3. KEV (Known Exploited Vulnerabilities) findings trigger when a discovered vulnerability appears in the CISA Known Exploited Vulnerabilities (KEV) catalog or VulnCheck KEV.

For more on findings, see Understanding findings.