Security Scanner Triage

Workflow

1. Normalize findings

• Convert scanner text into discrete claims.
• Group by category: data routing, credentials, defaults, docs mismatch, privilege/persistence.

2. Verify against code/docs

• Locate exact file/line evidence.
• Mark each claim as:
  • Confirmed
  • Partially confirmed
  • Not reproducible

3. Risk rate

• Critical / High / Medium / Low
• Include blast radius and exploitability notes.