A scanner gives you leads. A lead is not a finding.
Our rule: nothing becomes a finding until we've reproduced it, run a control against it, and written the test that proves it.
What we rule out goes in the dossier too.
Evidence, not alerts.
101442435.1K








