Skip to Content

Home
Quick Start
Find & Fix
Integrations
Stack
Compliance
Log in to the platform

Home
Quick Start
Find & Fix
Integrations
Stack
Compliance
Log in to the platform

On This Page

Groups
What is a group?
Why create several groups?
What is the process behind group deletion?
Vulnerabilities
What are vulnerabilities?
What is the difference between Age and Last report in the Vulnerabilities table?
How do I suggest that a reported vulnerability is a false positive?
How can I see only the findings of the dynamic application security testing (DAST)?
Why is the severity score in the platform lower than in external sources?
How can I see vulnerabilities specific to a particular Git repository?
Why are vulnerabilities found on very old files?
Is the same vulnerability reported separately for production and other environments?
How does the SLA apply if I find an overlooked vulnerability in a production environment?
Why did security testing under the Essential plan fail to find vulnerabilities?
What is Fluid Attacks’ time to detect?
What influenced the duration it took to detect the vulnerability?
How to evaluate the suitability of a security provider?
Does Fluid Attacks explain how to remediate a vulnerability?
Can I have detailed conversations with someone at Fluid Attacks about the detected vulnerabilities?
Evidence
How many pieces of evidence (images and videos) do I have access to?
Scope
What is a nickname?
Where can I find my repository’s nickname?
What is included in the scope of Continuous Hacking, and what is not?
How many branches does Fluid Attacks test?
How many environments does Fluid Attacks test?
Can security testing to production environments affect their availability?
Are production environments only tested to verify vulnerabilities in pre-production ones?
Why test production environments if QA can be tested instead?
Can I remove a repository from the platform?
Does Fluid Attacks test the security of email servers?
Does Fluid Attacks test low-code applications?
Reattacks
How many hours do I have to wait for a response to a reattack request?
How do I request a reattack?
How do I know that a requested reattack is in progress?
I am unable to request a reattack; why?
Security testing certificates
How do I generate a service certificate?
Reports
How do I generate the vulnerability report?
What is the difference between executive and technical reports?
What security requirements does Fluid Attacks verify?
Members
What is the difference between members and authors?
Comments
What is the difference between the two comment alternatives?
Treatments
Why does a vulnerability status still appear as “Vulnerable” when I have permanently accepted it?
What happens when a temporary acceptance treatment expires?
Policies
If I apply policies to a group, will these apply to all its repos?
What is the difference between policy at the organization level and the group level?
CI Gate
Must I only install Docker to run the CI Gate from my local machine?
Does Fluid Attacks’ CI Gate run locally or on the development infrastructure?
Is Internet connection required for using the CI Gate?
How many arguments can I pass to run Fluid Attacks’ CI Gate?
How often is it advisable to do “docker pull” to update the image?
In what mode can Fluid Attacks’ agent be run so it doesn’t break the build?
Must all team members use the same token to run the CI Gate in a group?
Do CI Gate executions fail in the case of service unavailability?
Platform problems
What can I do if I do not see information when I enter the groups?
What can I do if I cannot access the platform?

Quick Start FaqPlatform FAQ

Platform FAQ

Last updated on February 5, 2026

Integrations FAQ Scanner FAQ

Log in to continue reading

Access our documentation by logging in with your preferred account. It only takes a few seconds.

Fluid Attacks 2026. All rights reserved.