Vulnerability management
Last updated: Oct 27, 2026
To use the functions of the IntelliJ IDEA integration, click the Fluid Attacks plugin in the left-side menu of the IDE.
To see the options to request reattacks and get fix suggestions, hover over a vulnerability in the tree. Action icons appear on the right side of the row. The sections below give the step-by-step instructions.

If you do not have the extension, install it.
See vulnerable file and code line
To see the vulnerabilities that the Fluid Attacks platform reports in IntelliJ IDEA, follow these steps:
-
Click the Fluid Attacks icon in the left-side menu. The plugin shows a list of the weaknesses in your code.

-
Click the weakness that you want to examine. The plugin shows the names and vulnerable lines of all the affected files.

-
Select a file. The line of code with the vulnerability has a red underline.

Get AI-generated remediation guides
Always make sure that the remediation suggestions from AI are correct.
The IntelliJ IDEA plugin of Fluid Attacks uses AI to generate fix suggestions. The Custom Fix function generates a step-by-step guide about how to fix your code. To use it, follow these steps:
-
Click the Fluid Attacks icon in the left-side menu of the IDE.
-
To expand the weakness that you want to examine, click its name.
-
Hover over a vulnerable file to show the action icons.
-
Click the Custom Fix icon (wand icon) on the right side of the row.

The related editor tab opens and shows the remediation guide.

Apply AI-generated fix suggestions
Always make sure that the remediation suggestions from AI are correct.
The Autofix function applies suggested code fixes automatically. To use it, follow these steps:
-
Click the Fluid Attacks icon in the left-side menu of the IDE.
-
To expand the weakness that you want to examine, click its name.
-
Hover over a vulnerable file to show the action icons.
-
Click the Apply Fix icon (wrench icon) on the right side of the row.

Apply SCA Fix
This function works with JavaScript and Python projects. It works with these package managers: npm, Yarn, Bun, pip, Poetry, Pipenv, and uv.
For software composition analysis (SCA) vulnerabilities, the plugin can apply a dependency fix automatically. To apply it, follow these steps:
- Click the Fluid Attacks icon in the left-side menu of the IDE.
- To expand the weakness that you want to fix, click its name.
- Hover over a vulnerable file to show the action icons.
- Click the Apply SCA Fix icon on the right side of the row.
Request reattacks
After you fix your code, you can request reattacks to examine if your remediation corrects the vulnerabilities. To request them, follow these steps:
-
Click the Fluid Attacks icon in the left-side menu of the IDE.
-
To expand the weakness that you want to examine, click its name.
-
Hover over a vulnerable file to show the action icons.
-
Click the Reattack icon (shield icon) on the right side of the row.

For dependency (SCA) vulnerabilities, the reattack icon is the only available action. If you have a problem, read the reattack error solutions.
Use actions from the editor
You can also use the vulnerability actions directly from the code editor, without the Fluid Attacks panel. To use them, follow these steps:
-
Open a file that contains vulnerable code.
-
Right-click the vulnerable line (with a red underline).
-
In the context menu, find the Fluid Attacks actions:
- Apply Suggested Fix: Available only for vulnerabilities that are not SCA and that the plugin can fix automatically
- Apply SCA Fix: Available for SCA vulnerabilities that have a fix
- Request Reattack: Requests a reattack for the vulnerability at the cursor position
- Go to Criteria: Opens the Fluid Attacks database page for the vulnerability type
- See Finding Description: Shows the vulnerability details in a side panel

Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, complete this contact form.