Findings

Triage first. Detail on demand.

Findings group retained risk evidence by security question so reviewers can prioritise, inspect the supporting context and record advisory follow-up.

Prioritise, inspect and record review

Prioritise

Filter by severity, review area, rendered evidence state and Coverage.

Inspect safe detail

Open retained evidence, affected context and verification guidance without exposing prohibited sensitive values.

Record advisory review

Track review state and follow-up without changing permissions, sessions, applications or endpoints.

Security Observatory finding review showing severity, source context, evidence basis, limitations and manual review fields.
A finding keeps its retained evidence, assessment boundary and manual review workflow together.

See what supports the finding and where it stops

Evidence summary

What was observed and why it requires review.

Source and limitation

Where the evidence came from, what the source could establish and what it cannot prove.

Verification and review state

A bounded route to verify the condition in Salesforce, plus the recorded advisory review state.

Keep severity, evidence state and Coverage distinct

A failed or unavailable source never becomes None found. Intentional omission and incomplete capture remain visible rather than being turned into a clean conclusion.

For the complete vocabulary, detail-level semantics and completeness rules, review Evidence & Coverage and the Evidence Terminology Contract.