When managing your pentests, you often encounter situations where new vulnerability scans or manual tests uncover findings that are duplicates or re-occurrences of previously identified issues. Instead of cluttering your report with redundant entries, you can auto-merge these new findings with existing ones during the import process. This keeps your findings list clean, concise, and easy to manage, ensuring you have a single, comprehensive record for each unique vulnerability.
You can easily auto-merge new findings with existing ones when importing.
1. Go to "Pentests" in the left-hand menu.
2. Click on the relevant Pentest.
3. Move to the "Findings" Menu in the Pentest Dashboard.
4. Click "Import/Export" in the top right corner, then select "Import from file".
Upload File
5. Choose Type
6. Choose the file from your hard drive or drag and drop it to the Dashboard.
7. Wait for the file to upload.
Enable Auto-merge
8. Enable the "Auto-merge findings with existing findings" toggle.
Options
9. Update the settings in the "Options" section by configuring the "Merged Fields":
- Assets: Merge assets to the main finding.
- Evidences: Merge evidences to the main finding. Compares by title, asset, location, version, IP, port and protocol.
- Finding reoccurrences: All reoccurrences from merging findings will be made reoccurrences of the main finding.
- Weakness (CWE): Merge CWEs to the main finding.
- Known Vulnerability (CVE): Merge CVEs to the main finding.
Select Findings
10. Select specific findings to upload.
Confirm & import
11. Confirm the import. This may take a few minutes.
Results
12. Once complete, click "Close".