What is a Finding Lifetime? Ingrid Every finding has a lifetime that indicates how long it impacts the risk vector grade, depending on the particular risk vector. This is defined by the number of days a finding will impact the risk vector grade.Remaining Lifetime shows the projected number of days that a finding will continue to impact risk vector grading. This is a projection that assumes nothing changes in the future and a finding is not updated with new information. It may change if a finding is updated.Previously captured findings continue to impact ratings until the finding completes its lifetime (depending on the specific risk vector). It will continue to be listed in the company report, along with the active findings.The headline security rating will reach a perfect value if all vulnerabilities are fixed and all findings (associated with vulnerabilities) have completed their lifetime.See lifetime by risk vector.Learn why findings have a lifetime and decay period.Frequently Asked QuestionsWhy do findings with a GOOD grade have a remaining lifetime?All findings that impact a risk vector grade have a lifetime, including positive (GOOD) and neutral grades. The lifetime simply indicates how long any impact will last.Why would a GOOD finding stop impacting ratings?While the remaining lifetime is likely to be more useful when working on remediating findings, this is still a function of how risk vectors – and ultimately rating – are graded.Why do findings of risk vectors that are in beta have a remaining lifetime?Because the lifetime of a finding is the number of days the finding will impact the risk vector grade and is not directly impacting the rating, beta risk vectors have a lifetime.Beta risk vectors function exactly like regular risk vectors, which evaluates the underlying data and is given an overall assessment. However, the data is undergoing testing. Any grade does not ultimately impact the rating during the beta period.Why are No: Lifetime Expired findings tracked in the Findings Table?The No: Lifetime Expired status means the finding has completed its lifetime, is expired, and no longer impacts the rating.An expired lifetime is indicated by the Remaining Lifetime column in the Findings Table being empty. Expired findings are kept for up to one year for reference.Learn more about Impacts Risk Vector Grade statuses. December 19, 2025: Update links to open in new tab. January 14, 2024: Expired findings clarification. January 25, 2023: Reason for the Patching Cadence risk vector’s lifetime. January 14, 2021: Published. Related articles Why Do Findings Have a Decay and Lifetime Period? TLS/SSL Finding Remediation & Remediation Verification What is a Finding Rescan? Finding Rescan: Asset Not Found and Assumed Remediated What is a Bitsight Security Rating? Feedback 3 comments Sort by Date Votes Muhammad Zaidi March 26, 2021 14:09 If diligence finding have been fixed within two days of its finding, Will it continue showing in rating for next 58days ? -3 Maciej Stolarczyk August 13, 2021 09:52 yup lol 1 Mrudun Puthumana June 30, 2026 14:28 If the finding is not resolved , and it completes its lifetime , will it get removed from imapacting rating ? will it again starts to impact with a new lifetime date 0 Please sign in to leave a comment.