Find what matters
Filter findings by severity, status, category, asset, assignee, tag, CVE or text. The list can also show counts per filter.
Status workflow
Move a finding through confirmed → in progress → resolved. Two further states, risk accepted and false positive, need a reason and a comment and can optionally expire. They are available to owners, admins and security managers only; developers and analysts can use the work states. TasScan staff review false positives and may reopen a finding with an explanation.
Work together
- Assign a finding to a teammate and comment on it.
- Attach evidence (PNG, JPEG, PDF, TXT, JSON or HAR, up to 10 MiB). Downloads use short-lived signed links and are audited.
- Evidence we show you is redacted (tokens, cookies, credentials, personal data) and truncated to 4 KiB.
Confirm your fix
Use Verify Fix on a finding. It re-runs only that check against the affected URL, through the same safety gate as a scan, and stores the result: resolved, still vulnerable or unable to verify. You can run it once every 10 minutes per finding. Two consecutive clean full scans also resolve findings that no longer appear.