Home
User Guide
Information that helps you to make the most out of Seeker for securing your applications
Working with Vulnerabilities
Seeker provides a rich set of tools to explore and handle security vulnerabilities detected in your applications.
Triage a Vulnerability
To manage the handling of a detected vulnerability, you need to triage it.

User Guide
Information that helps you to make the most out of Seeker for securing your applications
- Working with Vulnerabilities
  Seeker provides a rich set of tools to explore and handle security vulnerabilities detected in your applications.
  - Explore a Vulnerability
    The dedicated Vulnerability Details page provides a wealth of information about the latest detection of a vulnerability, including its detailed description, classification by major standards, detection samples, remediation guidance, and access to the related online training.
  - Triage a Vulnerability
    To manage the handling of a detected vulnerability, you need to triage it.
  - Tag a Vulnerability
    To filter and manage vulnerabilities more effectively, you can apply custom tags to a vulnerability.
  - Track a Vulnerability
    To track the handling of a vulnerability, create a ticket in a bug-tracking system.
  - Export Vulnerabilities
    In addition to displaying detected vulnerabilities in various contexts, Seeker enables you to export this information in different formats.
- Working with Projects
  Seeker uses projects to organize information and workflows.
- Working with Recommendations
  Seeker offers you various personalized recommendations to optimize your workflows and application testing by fine-tuning your system configuration.
- Configuring User Settings
  Personalize your experience with Seeker by configuring your user settings.

Triage a Vulnerability

To manage the handling of a detected vulnerability, you need to triage it.

Triaging a vulnerability means assigning it an owner, status, and severity. Seeker supplies a number of out-of-the-box vulnerability statuses. In addition, administrators can configure custom vulnerability statuses.

In the Triage area, click Edit.
Select an owner (assignee) for the vulnerability, or click Assign to me.
Select an appropriate out-of-the-box or custom vulnerability status. For detailed information, see Out-of-the-box Vulnerability Statuses.
Optionally, change the severity level assigned to the vulnerability upon detection to a custom level.
Optionally, enter a comment.
Click Save.

If you have entered a comment, it will appear under Latest comment along with the other comments. To add more comments, click Comment.

Attention: If the status that you have selected requires approval, this change will take effect only after it is approved by another user who is authorized to do so. Meanwhile, the vulnerability status will indicated as pending approval.

Note: For each new version of the project, when Seeker confirms that a detected vulnerability has been fixed, its status is automatically set to Fixed.