Work

Findings, incidents, and remediation — investigate and close risk.

Investigate & close

Work queue at /dashboard/work
Exact page: /dashboard/work — findings inbox with audited status changes.

/dashboard/work — findings from classified traffic (status changes audited via finding_status_history). Create incidents for grouped cases — not automatically for every event.

  1. 1

    Triage findings

    Filter by severity/asset; review evidence.

  2. 2

    Optional incident

    Group related findings; assign owners.

  3. 3

    Tighten policy

    Rules in Policies. Deep dive: Findings & incidents.