False positive requests

Last updated: Mar 25, 2026


There is a treatment that you can request for any reported vulnerability when, according to a judicious analysis by your organization, said vulnerability poses no threat. This treatment appears as "False positive request" within the treatment options on Fluid Attacks' platform.

You can submit your request either from the vulnerability's information window or the window to edit vulnerabilities. The latter allows you to request the treatment for more than one vulnerability.

Follow these steps to use the "False positive request" option from the information window.

  1. In the Vulnerabilities section, click on the weakness in question to see its related vulnerabilities.

  2. Click on the intended vulnerability.

    Click on a vulnerability to see information on the Fluid Attacks platform
  3. In the information window, click on the Treatments tab.

    Access the Treatments tab on the Fluid Attacks platform
  4. Select False positive request from the Treatment dropdown menu.

    Find False positive request in the Treatments tab on the Fluid Attacks platform
  5. Write a justification for your request, optionally add or remove tags, and click the Confirm button.

    Write a justification in the Treatments tab on the Fluid Attacks platform

Fluid Attacks will read your justification to consider whether the vulnerability actually poses no threat at all, in which case it is deleted from the Vulnerabilities table. However, if Fluid Attacks still considers there is risk caused by that vulnerability, then it will remain reported.

The following are the steps to request the treatment from the Manage treatments window.

  1. In the Vulnerabilities section, click on the weakness in question to see its related vulnerabilities.

  2. Tick the checkbox next to the reported vulnerability for which you want to assign the treatment. Then click on Edit treatment.

    Choose a vulnerability to edit it on the Fluid Attacks platform
  3. Select False positive request from the Treatment dropdown menu.

    Find False positive request treatment option on the Fluid Attacks platform
  4. Add a justification for your request and update the remaining fields if needed.

    Add justification for false positive request on the Fluid Attacks platform
  5. Click on Confirm when you are done.

You can see Fluid Attacks' decision on your request in the False positive column.

Find False positive column on the Fluid Attacks platform