Finding Rescan Statuses

The Bitsight platform regularly checks for new observations. Findings are updated as these observations change, e.g., there are newly observed Diligence findings or an existing finding is remediated. This update is called a finding rescan.

Rescan status indicates the status of a user-requested rescan of a finding.

• The current status persists until a user requests a new rescan on the finding.
• The refresh status does not show the status of automated scans.

Asset Not Found

Bitsight was unable to get any data from the asset. This is likely due to the asset being offline or security settings related to the asset.

See troubleshooting.

Asset Not Reached finding rescan status, Asset Not Found finding rescan status

Assumed Remediated

This remediation status has different descriptions based on which risk vector the finding belongs to:

• SSL config, SSL Certs, Open Ports and Server Software: “Assumed Remediated” is the immediate rescan reply when our scans show that the issue has been remediated and/or the finding grade will improve to good. This status will be updated up to 72 hours later when the finding stops impacting the grade to “Remediated”.
• Open Ports Findings: We were unable to gather data on this asset. However, if you closed this UDP port as part of your remediation actions, this is an expected result. This finding will drop off from your rating after it completes its remaining lifetime.
  
  “Assumed Remediated” will be the the final status.
• Web Application Headers Findings: The rescan process was unable to gather any data on the web application header requested. If the original web application header was recently changed as part of the remediation actions, this is an expected result. This finding will drop off from your rating after it completes its remaining lifetime.
  
  “Assumed Remediated” will be the the final status.

Failed

The scan failed for internal reasons. Please try again later.

No Status (Blank)

A user has never requested a rescan or the finding is not eligible for a rescan.

Not Remediated

The issues are still visible and this finding will continue to impact the risk vector grade until the end of its lifetime.

Partially Remediated

Certain aspects of the finding have been fixed but there are still vulnerabilities present. Check out the new finding created with grade [grade].

Remediated

This finding is resolved (such as the asset was taken offline) and no longer impacts the risk vector grade. A new good finding was created. If the remediation was by an asset taken offline, there will be no new finding. Otherwise, a new good finding is created.

Replacement Finding

A new finding that was created after a rescan of the previous finding.

Scanning

A user-requested rescan is in progress.