Findings

What hunts, scans and policy audits turned up, with the evidence, compliance references and a recommendation.

Filter by status (open by default), source (scan, hunt, audit) and severity.

Open a finding to see the asset, confidence, CVE, where it came from, when it was first and last seen, the recommendation and the raw evidence. The compliance chips map it to PCI-DSS, ISO 27001, NIST SP 800-52 or OWASP ASVS where they apply.

Action
Mark fixed	You fixed it. If a later scan or hunt sees the problem again, it opens a new finding
Accept risk	You decided not to fix it. Add a note: it is kept in the audit log
Ask Garry	Ask how to fix it, or have Garry propose the fix

Attack-surface scans also mark their own findings fixed when a later scan of the same target no longer sees the problem.