# Vulnerabilities

The **Vulnerabilities** module provides a centralized view of security findings across your environment. It enables teams to track, manage, and remediate vulnerabilities identified through automated integrations, imported reports, and manual entries.

Organizations can assign ownership, collaborate through activity logs, and monitor remediation performance using TTR (Time to Remediate) metrics based on severity.

---

<div style="
  background: rgba(128,128,128,0.08);
  border: 2px solid rgba(128,128,128,0.25);
  border-radius: 10px;
  padding: 20px 20px 0px 20px;
">
  <div style="font-weight:700; margin-bottom:20px;">Who can use this feature?</div>

  <table style="border-collapse:collapse;">
    <tr>
      <td style="vertical-align:top; padding:0 8px 10px 0;">
        <Icon icon="material-filled-person" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0 0 10px 0;">
        All <span style="color:#d760f9; font-weight:600;">Account Owners</span>, <span style="color:#d760f9; font-weight:600;">Security Admins</span> and <span style="color:#d760f9; font-weight:600;">End Users</span>
      </td>
    </tr>
    <tr>
      <td style="vertical-align:top; padding:0 8px 0 0;">
        <Icon icon="material-filled-flag" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0;">
        Available on the <span style="color:#d760f9; font-weight:600;">Free</span>, <span style="color:#d760f9; font-weight:600;">Core</span> and <span style="color:#d760f9; font-weight:600;">Business</span> plans
      </td>
    </tr>
  </table>
</div>

---

## Key Features

<CardGroup cols={2}>
<Card title="Centralized Tracking" href="/centralized-vulnerability-tracking-2033665m0" icon="material-outline-bug_report">
  View and manage vulnerabilities from integrations, imports, and manual entries in one place.
</Card>

<Card title="Import Findings" href="/import-vulnerabilities-2033666m0" icon="lucide-cloud-upload">
  Upload vulnerability reports from tools like Burp, Nessus, and ZAP.
</Card>

<Card title="Manual Creation" href="/create-manual-vulnerabilities-2033667m0" icon="lucide-circle-plus">
  Create vulnerabilities manually for findings not captured by integrations.
</Card>

<Card title="Team Collaboration" href="/assign-and-collaborate-on-vulnerabilities-2033668m0" icon="lucide-users">
  Assign vulnerabilities and collaborate using activity logs and comments.
</Card>

<Card title="TTR Configuration" href="/configure-time-to-remediate-ttr-2033669m0" icon="lucide-settings">
  Define remediation timelines based on severity to track performance.
</Card>
</CardGroup>

---

## Troubleshooting

<AccordionGroup>

<Accordion title="Vulnerability Import Fails" defaultOpen>
If a report fails to import:

- Ensure the file format matches supported types (**Burp**, **Nessus**, or **ZAP**)
- Verify the file is a valid **.xml** report
- Check file size limits (e.g., max upload size)

If issues persist, validate the report structure from the source tool
</Accordion>

<Accordion title="No Vulnerabilities Visible">
If vulnerabilities are not showing:

- Confirm vulnerabilities are assigned to you (for **End Users**)
- Check filters such as **Severity**, **Status**, or **Source**
- Ensure integrations are properly syncing data

Account Owners and Security Admins can view all findings
</Accordion>

<Accordion title="TTR Not Updating">
If TTR values are not reflecting correctly:

- Verify **TTR configuration by severity** is set
- Ensure the vulnerability has a valid **severity level**
- Confirm the vulnerability status is tracked (e.g., **Open**, **Remediated**)

TTR depends on severity-based configuration and lifecycle updates
</Accordion>

<Accordion title="Unable To Assign Vulnerability">
If assignment fails:

- Ensure users exist and have access to the platform
- Verify the user has appropriate role permissions
- Check if the vulnerability is editable (not restricted by source)

Assignments allow multiple users depending on configuration
</Accordion>

</AccordionGroup>