Skip to content

Understanding Findings

Aura Risks Center provides a view of security findings identified from product releases.

Findings are generated from analyzed release data and may include vulnerability, policy, and license-related observations.

Risk findings may include:

  • Vulnerabilities
  • Policy observations
  • License observations

A finding may include:

  • Component affected
  • Vulnerability identifier
  • Severity
  • Available assessment information
  • Response or justification data when available

Severity indicates the classified impact level of a finding. Severity alone does not establish exploitability, reachability, or final risk acceptance status.