False positive requests

Last updated: Oct 26, 2026

---

You can request a treatment for a reported vulnerability if your organization analyzes it carefully and finds that it is not a threat. This treatment shows as "False positive request" in the treatment options on the Fluid Attacks platform.

You can send your request from the information window of the vulnerability or from the window to edit vulnerabilities. With the window to edit vulnerabilities, you can request the treatment for more than one vulnerability.

To use the "False positive request" option from the information window, follow these steps:

1. In the Vulnerabilities section, click the weakness to see its related vulnerabilities.

2. Click the vulnerability.

   

3. In the information window, click the Treatments tab.

   

4. Select False positive request from the Treatment dropdown menu.

   

5. Write a justification for your request. If you want, add or remove tags.

   

6. Click the Confirm button.

Fluid Attacks reads your justification to examine if the vulnerability is a threat. If it is not a threat, Fluid Attacks removes it from the Vulnerabilities table. But, if Fluid Attacks finds that the vulnerability is a risk, the vulnerability stays in the report.

To request the treatment from the Manage treatments window, follow these steps:

1. In the Vulnerabilities section, click the weakness to see its related vulnerabilities.

2. Select the checkbox next to the vulnerability that you want to assign the treatment to. Then, click Edit treatment.

   

   If you want to assign the treatment "False positive request" to more than one vulnerability, tick their corresponding checkboxes and click the Edit button.

3. Select False positive request from the Treatment dropdown menu.

   

4. Write a justification for your request. If necessary, update the other fields.

   

5. Click Confirm.

The False positive column shows the decision of Fluid Attacks about your request.