Feature 1
Inspect the evidence behind a finding
Understand what the scanner observed before deciding how the organisation will respond.
- Review severity
- Inspect instances
- Read scanner evidence
Capability
Scan Findings
Review vulnerability evidence, understand severity and confidence, and record the resolution of each finding.
The outcome
Turn scanner output into prioritised, explainable remediation decisions.
How it helps
How Scan Findings works
This capability connects with the wider Apollo platform, so information can support action, evidence and reporting without being entered again.
Feature 2
Record the remediation decision
Keep unresolved, accepted, false-positive and fixed outcomes visible with the scan history.
- Choose a resolution
- Record context
- Generate evidence
What is included
One capability, connected to the wider platform
Use the capability you need now while keeping its records, work and evidence ready for related capabilities across Apollo.
Included features
- Severity and confidence
- Grouped instances
- Scanner evidence
- Remediation guidance
- Resolution outcomes
- Evidence reports
Connected platform
Keep exploring Apollo
See where this capability is available and the related capabilities and solutions that use the same connected information.
Site Scanning
Define authorised sites, configure scan access and run on-demand or scheduled security scans.
Explore capabilityTask Management
Assign, prioritise and track responsibilities across all aspects of your GRC program.
Explore capabilityAvailable in:Trust Management
Questions and answers
Questions about Scan Findings
Practical answers to common questions about managing this responsibility well.
Why does scan findings matter?
Turn scanner output into prioritised, explainable remediation decisions.
What should scan findings include?
It should cover severity and confidence, grouped instances, scanner evidence, remediation guidance and resolution outcomes, with enough context to support action and explain decisions.
Who should be responsible for scan findings?
Ownership should sit with the person who can make decisions and keep the information current. A specialist or governance team may provide the method, but accountability should not be left with an unnamed group.
How do you keep scan findings current?
Set review dates according to risk and reassess after relevant incidents, material change, new evidence or overdue follow-up work. Preserve the history so changes remain explainable.
What evidence should be retained for scan findings?
Keep the source information, owner, review and approval history, supporting documents and resulting actions needed to show what was considered and what happened next.
See Scan Findings in Apollo
Book a focused demonstration and we will show how the capability fits your current responsibilities, existing information and next practical priorities.