What To Do After Remediation

Remediated findings are not reflected in Findings until we detect them with our scans. To initiate a scan, request a rescan. This process is outlined below.

1. Request a Rescan

To rescan a finding, follow the steps laid out in Requesting a Rescan.

User-requested rescans not available for select risk vectors. These risk vectors have automated scans that regularly check on findings to see if they are still present. See Finding Behavior to compare rescan behavior and finding lifetime by risk vector.

2. Review Responses

• The response can be immediate (Instant Reply) or can take up to 11 days to complete a findings rescan depending on the risk vector.
• The possible outcomes (rescan status) to a successful rescan also depends on the risk vector.

See rescan by each risk vector or review the finding behavior, as outlined in risk vector overviews.

3. Troubleshoot Unexpected Responses

Further steps may be necessary if a finding does not update as expected after a rescan. Options depending on which part of the result was unexpected:

Result: The finding’s grade did not improve as you thought it would.

Next Steps: Confirm your finding is fixed using the information provided in the article Verifying That a Finding Is Remediated.

Result: The rescan status is Asset Not Found.

Next Steps:

If you are sure the asset is online and nothing is blocking our scans, try the rescan again.

If the asset still can't be reached, contact Bitsight Support for further assistance.

Result: The finding did not follow the rescan behavior as laid out in the tables above.

Next Steps: Contact Bitsight Support for further assistance.