Creating Findings
How to create vulnerability findings in Vulnsy, either as reusable library templates or directly within a report.
You can create findings in two places: from the Findings page (to add to your library) or directly inside a Report.
Creating a Library Finding
- Navigate to the Findings page from the sidebar
- Click Add Finding
- Fill in the finding details (see fields below)
- Click Save to add it to your organization's finding library
Creating a Finding Inside a Report
- Open a report and navigate to its findings section
- Click Add Finding
- Choose to create a new finding from scratch or import one from your library
- Fill in or customize the details for this specific engagement
Findings created directly in a report are not automatically added to your library. Save them to the library explicitly if you want to reuse them later.
Finding Fields
| Field | Required | Description |
|---|---|---|
| Title | Yes | A clear, concise name for the vulnerability |
| Severity | Yes | Critical, High, Medium, Low, or Informational |
| Description | Yes | Detailed writeup of the vulnerability and its impact. Rich text — bold, code blocks, lists, links, and pasted screenshots |
| Remediation | Yes | Steps the client should take to fix the issue |
| CVSS | No | CVSS 3.1 and/or 4.0 score — enter or build the vector and Vulnsy calculates the score |
| Affected assets | No | The URLs, IPs, hostnames, or networks affected |
| References | No | URLs to CVEs, OWASP, vendor advisories, or other external resources |
| Evidence | No | Screenshots and an evidence narrative. See Evidence |
Library findings also belong to a repository — a named collection (e.g. "AppSec", "NetPen") that keeps your library organized. See Finding Library.
Rich Text Editor
The description, remediation, and evidence narrative fields use a rich text editor. You can:
- Format text with bold, italic, and inline code
- Add code blocks with syntax highlighting
- Create ordered and unordered lists
- Insert links and tables
- Paste content directly from other tools
When pasting content from external sources, review the formatting. The editor preserves most HTML formatting, but complex layouts may need adjustment.
Saving to Your Library
When you create a finding you want to reuse across engagements, save it to your organization's finding library. This makes it available to all team members and can be imported into future reports.