Prioritized risks
The "What to fix first" section ranks the most important security issues found on the machine.
Priority levels
| Priority | Meaning | Action |
|---|---|---|
| P0 | Critical — immediate security gap | Fix now |
| P1 | High — significant exposure | Fix within days |
| P2 | Medium — should be addressed | Plan a fix |
| P3 | Low — informational hardening | Optional |
Risk details
Each risk includes:
- Title — short description of the issue (e.g., "SSH password authentication enabled")
- Summary — context about why this matters and what to do
- Estimated time — rough engineering time to remediate
- Risk type ID — stable identifier for tracking across scans
Dashboard alerts
The dashboard home page shows an Attention required section that aggregates P0-P3 risks across all machines in the organization. Use the priority toggle buttons to filter by severity.
Cross-scan deduplication
Risks use a stable risk_type_id (e.g., ssh_password_login_allowed) so the same issue on the same machine is tracked consistently across scans, even if the AI-generated wording varies slightly.