What’s in the detail view
1
Description
A plain-language explanation of what the vulnerability is, why it matters, and how an attacker would use it.
2
Steps to reproduce
A clear, ordered set of steps that walk you through triggering the issue yourself. Request payloads, expected responses, everything you need to confirm it end to end.
3
Severity and CVSS score
The score the agent assigned and the severity tier it falls into, so you know how urgent the finding is.
Attack path
For complex findings, the agent also attaches an attack path: an interactive diagram that walks through how the agent actually discovered the vulnerability, step by step. Simple findings skip this since the description and reproduction steps already cover everything. The attack path is interactive. You can zoom in and out, pan around the canvas, and hover over nodes for more detail on each step. It’s view-only, so nothing you do there changes the finding itself. It’s there purely so you can see how the agent got from the starting point to the vulnerability.Activity
Each finding has an Activity tab that shows a timeline of what’s happened to that specific finding. It’s scoped to the one finding you’re looking at, not a global log across the app. Only three kinds of events show up here.1
Notes
Any note left on the finding, along with who added it and when.
2
Manual status updates
When someone marks the finding as Fixed or Risk Accepted by hand, the change shows up here with who did it.
3
Retests
Every retest that’s been run on this finding, along with the final verdict (still reproducible or no longer reproducible).