Risks: Findings – Bitsight Knowledge Base

Findings are the culmination of observed internet traffic and configurations. Bitsight records them as events and records. Findings are presented in a table view that provides a single place to sort, filter, analyze, comment on, track your remediation efforts, and export Bitsight findings.

Findings are reported in Coordinated Universal Time (UTC).

Navigation Options

SPM App: Risks ➔ Findings

Bitsight API: GET /v1/companies/entity_guid/findings

Actions
Fields & Finding Details Sheet
- Finding Details Sheet: Details Tab
- Finding Details Sheet: Attributed To Tab
Filters

Actions

Action	Instructions
Add/view notes:	Select Actions ➔ Add/View Notes at the top-right of the Findings page.
Comment on the finding (finding comments):	Select the Comment option at the right of the finding in the table.
Customize the data in the table:	Use the Customize columns button at the top-right.
Download the findings table (.csv):	Use the Download button at the top-right. If the .csv contains 9000 or fewer rows of data, the download begins immediately. If the .csv contains greater than 9000 and less than 100,000 rows of data, the download runs asynchronously. When the download is ready, the user who requested it is notified with an email and a notification.
Filter the table:	Select the Filter button to expand or collapse the filters and then use a filter set or any of the available filters. Use the Impacts RV Grade filter to see only findings that impact the risk vector grade. See omitted findings.
Generate reports, including: Executive Report Download Company Report Company Preview Report NIST CSF Report ISO/IEC 27001 Report	Select Reports at the top-right of the Findings page.
Highlight the selected company as the primary:	Select the Actions dropdown at the top-right of the Findings page. Select Configure Primary Rating. Select an available self-published rating. Select Save Changes.
Request a finding refresh:	Select the Refresh option at the right of the finding in the table.
Search findings:	Do a text search using the search bar at the top-right. Text with matches are highlighted. See search fields.
See the Finding Details sheet:	Select a finding from the table in the Findings page.
See the Service Providers sheet:	Select Actions ➔ Service Providers at the top-right of the Findings page.
See the Products sheet:	Select Actions ➔ Service Products at the top-right of the Findings page.
Tag assets:	Select a finding to open the Finding Details sheet. Select the Tag Asset button in the Tags column of an asset in the Assets section of the sheet.
Update the remediation status for Issue Tracking:	Select the Update Status option at the right of the finding in the table.

Fields & Finding Details Sheet

Field	Description
Risk Vector	The Bitsight risk vector.
Finding Identifier	The asset (e.g., IP, domain, host, application, port) and its status (e.g. online/offline, version, support status) that identifies the finding. Refer to the Certificate Serial Number to identify TLS/SSL Certificate findings.
Tags	Infrastructure tags assigned to this company.
First Seen	The date when this finding was first observed.
Last Seen	The date when this finding was last observed.

The finding details in the table and Finding Details sheet vary depending on the risk vector. See details for:

Finding Details Sheet: Details Tab

The Details tab in the Finding Details sheet may contain the following sections:

Details: Details about the finding.
Remediations: Finding details and remediation tips.
Assets: Asset details. See how assets are attributed to findings.
Comments: Finding comments.

Finding Details Sheet: Attributed To Tab

The Attributed To tab in the Finding Details sheet presents findings attribution and the ratings tree.

Filters

Filter	Description & Values	Applicable Risk Types
Risk Vector	Select all risk vectors in a risk category or individual risk vectors.	All
First Seen	Include findings that were first seen in the past: 7 Days 1 Month 3 Months Custom	All
Last Seen	Include findings that were last seen in the past: 7 Days 1 Month 3 Months Custom	All
Web App Sec Tests	Filter by assessment categories.	Web Application Security
Remediation Status	No Status Open To Do Work In Progress Resolved Risk Accepted	Diligence Risk Vectors
Status Update Date	Include findings with a remediation status that was last updated in the past: 7 Days 1 Month 3 Months Custom	Diligence Risk Vectors
Assigned To	The user assigned to remediate the finding.	Diligence Risk Vectors
Refresh	Filter by refresh status: Not Refreshed Pending Refreshed - Finding Updated Refreshed - Asset Not Reached	Select Diligence risk vectors. See refresh by risk vector.
Grade	Filter by finding grade: Good Fair Warn Bad Neutral N/A	Diligence Risk Vectors
Impacts Risk Vector Grade	Indicates if the finding influences the risk vector grade. See values.	All
Remaining Lifetime	Lifetime range (`#` days).	See lifetime by risk vector.
Attributed To	Filter by subsidiary.	All
Finding Severity	Filter by finding severity: Severe Material Moderate Minor	Compromised Systems, Diligence (except Mobile Application Security), and File Sharing risk vectors.
Tag	Public Private Selected tags	All
Asset Importance	Filter by asset importance: Critical High Medium Low None	All
Vulnerability	Vulnerability classification: Confirmed Potential Selected vulnerabilities	Patching Cadence
Vulnerability Severity	Filter by Bitsight severity: Severe Material Moderate Minor	Patching Cadence
Duration	Minimum `#` of days to maximum `#` of days.	All. See lifetime by risk vector.
Patching Cadence: Remediated?	Yes No	Patching Cadence
Infection Family	Filter by malware family.	Compromised Systems risk vectors.
File Sharing Category	Filter by file sharing category.	File Sharing
Pass / Fail Test	Filter by mobile application analysis results (testing results). Pass Fail	Mobile Application Security

September 9, 2024: Tags are displayed in its own column.
July 18, 2024: Findings are no longer sampled. All findings for monitored companies are visible in Bitsight.
May 29, 2024: Certificate Serial Number replaces Finding Identifier as the TLS/SSL Certificates finding identifier.