Statuses
Every status a scan, a finding and a retest can have, and what moves them.
#Finding statuses
| Status | Meaning | Moves on when |
|---|
| Open | Verified and waiting for your fix. | You mark it fixed, request a retest or accept the risk. |
|---|
| Marked fixed | Your team says it is fixed. Not yet confirmed by Zaaf. | You request a retest. |
|---|
| Retest in progress | Agents are repeating the attack. | A researcher publishes the result. |
|---|
| Fixed (verified) | Zaaf could not reproduce it after your fix. | Final. |
|---|
| Risk accepted | Your team chose not to fix it, with a recorded reason. | Stays accepted. Ask Zaaf if you want it looked at again. |
|---|
#Scan statuses
| Status | Meaning |
|---|
| Queued | Waiting for an agent. |
|---|
| Running | Agents are mapping and investigating. |
|---|
| Review | A researcher is verifying what agents found. |
|---|
| Completed | Done. Reports are available. |
|---|
| Cancelled | Stopped by your team. |
|---|
#Retest results
| Result | Effect on the finding |
|---|
| Fixed | Becomes Fixed (verified). A comment says Zaaf could not reproduce it. |
|---|
| Not fixed | Returns to Open. A comment says it is still reproducible. |
|---|