> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cysmiq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Triage vulnerabilities

> Review finding evidence, assign an owner, and record the correct workflow outcome.

Triage turns a new finding into a clear decision and an owned next step. Review the available evidence before changing its status or resolution.

## Prerequisites

* A workspace with at least one scanned repository and vulnerability
* Permission to assign vulnerabilities and update their status

## Steps

<Steps>
  <Step title="Open a vulnerability">
    On the **Vulnerabilities** page, use filters or a saved view to find the item you want to review, then open it.

    <Frame caption="A vulnerability detail page with evidence and workflow controls.">
      <img src="https://mintcdn.com/cysmiq/lbuvMvb731bVwYg6/images/guides/triage-vulnerabilities/triage-01-review-finding.webp?fit=max&auto=format&n=lbuvMvb731bVwYg6&q=85&s=21f5cad11bb9b40a00a40416967425e9" alt="Flask debug vulnerability detail page showing source evidence, severity, CWE, status, and assignment controls." width="2880" height="2160" data-path="images/guides/triage-vulnerabilities/triage-01-review-finding.webp" />
    </Frame>
  </Step>

  <Step title="Review the evidence">
    Check the information that supports the finding:

    * **Description** and highlighted source or advisory details
    * **Vulnerable**, **Exploitable**, **Severity**, and **CWE** indicators
    * **Locations** to understand affected branches, files, manifests, or assets
    * **Analysis** when call hierarchy or data-flow evidence is available
    * **Activity** for earlier decisions and comments

    Use the evidence to decide whether the finding needs remediation, more review, or a final disposition.
  </Step>

  <Step title="Assign an owner">
    In **Assignment**, select **Assign**, then choose the team member responsible for the next action.

    <Frame caption="Assign the vulnerability to a workspace member.">
      <img src="https://mintcdn.com/cysmiq/lbuvMvb731bVwYg6/images/guides/triage-vulnerabilities/triage-02-assign-owner.webp?fit=max&auto=format&n=lbuvMvb731bVwYg6&q=85&s=8ce772cf5644490d2a029aaf382b505a" alt="Assign Vulnerability dialog showing Maya Chen as an available workspace member." width="2880" height="2160" data-path="images/guides/triage-vulnerabilities/triage-02-assign-owner.webp" />
    </Frame>
  </Step>

  <Step title="Record active work">
    Select the current status button and move the vulnerability to the appropriate active status. Use **In Progress** when remediation or investigation has started, and add a short comment describing the next step.

    <Frame caption="An assigned vulnerability marked In Progress.">
      <img src="https://mintcdn.com/cysmiq/lbuvMvb731bVwYg6/images/guides/triage-vulnerabilities/triage-03-in-progress.webp?fit=max&auto=format&n=lbuvMvb731bVwYg6&q=85&s=464798f6246f36316c1f1a7cba2f9599" alt="Vulnerability detail page showing In Progress status and Maya Chen as the assignee." width="2880" height="2160" data-path="images/guides/triage-vulnerabilities/triage-03-in-progress.webp" />
    </Frame>
  </Step>

  <Step title="Record the final outcome">
    When work is complete, select a final status and resolution that reflects the decision:

    * **Resolved** with **Fixed** for a remediated vulnerability
    * **Closed** with **False Positive** when evidence shows the finding is invalid
    * **Closed** with **Won't Fix** when the finding is valid and the risk is accepted
    * **Closed** with **Duplicate** or **Cannot Reproduce** when those outcomes apply

    Add decision context before selecting **Update Status**. Include the evidence, reviewer, or linked discussion needed for another person to understand the outcome.

    <Frame caption="A false-positive disposition with review context.">
      <img src="https://mintcdn.com/cysmiq/lbuvMvb731bVwYg6/images/guides/triage-vulnerabilities/triage-04-false-positive.webp?fit=max&auto=format&n=lbuvMvb731bVwYg6&q=85&s=b4450dbbb40b71b44df94f1588a53fbd" alt="Change Vulnerability Status dialog set to Closed and False Positive with decision context." width="2880" height="2160" data-path="images/guides/triage-vulnerabilities/triage-04-false-positive.webp" />
    </Frame>

    The **Activity** tab records status changes, resolutions, assignments, and comments. See [Vulnerability lifecycle](/vulnerability-management/lifecycle) for all statuses and resolutions.
  </Step>

  <Step title="Coordinate follow-up work">
    Create a Jira or Linear issue when remediation should be tracked outside Cysmiq. See [Create tickets](/guides/create-tickets) for the maintained ticketing workflow.
  </Step>
</Steps>

## Related documentation

* [Vulnerability detail view](/vulnerability-management/vulnerability-detail-view)
* [Vulnerability lifecycle](/vulnerability-management/lifecycle)
* [Manage snooze requests](/guides/manage-snooze-requests)
* [Auto assignment](/vulnerability-management/auto-assignment)
* [Tickets](/vulnerability-management/tickets)