Work
Findings, incidents, and remediation — investigate and close risk.
Investigate & close

/dashboard/work — findings from classified traffic (status changes audited via finding_status_history). Create incidents for grouped cases — not automatically for every event.
- 1
Triage findings
Filter by severity/asset; review evidence.
- 2
Optional incident
Group related findings; assign owners.
- 3
Tighten policy
Rules in Policies. Deep dive: Findings & incidents.