Objects and terms

These words match the live dashboard.

Exposure

An exposure is a secret-level row.
Path: /exposures.

Typical fields:

• Secret type
• File and line
• Repository
• Severity 0–10
• Alerted
• False positive
• Remediated

Exposures list. Use search and status actions here. Export CSV downloads the current filter set.

Report

A report is an attribution event.
Path: /reports.

It includes ownership. It is a different list from Exposures.

Reports list. Filter by ownership, severity, age, and source. Open a row for the full report.

Vendor incident

A vendor incident sits on a vendor scorecard.
Path: /vendors, then Open.

It has a short summary, severity, confidence, category, and date.
The vendor grade is computed from active incidents. See Scoring and attribution.

Vendor Monitoring. Grade is A–F from a 0–100 score. Select Open for incidents.

Ownership

Reports use three ownership values:

Value	Meaning
First-party	Attributed to your org
Joint	Shared
Third-party	Vendor-attributed

The filter help text is the same: first-party is your org; joint is shared; third-party is vendor-attributed.

Severity vs confidence

Term	Where	Meaning
Severity (number)	Exposures	0–10. Higher is more urgent.
Severity (label)	Reports, alerts, vendors	Low, Medium, High, Critical (vendors also use numeric bands).
Attribution confidence	Reports, vendor incidents, alert rules	How sure the attribution is, 0–100%.

Confidence does not hide an approved row.
Lower confidence reduces how much a vendor incident weighs on the TPRM scorecard.

False positive vs remediated

Mark	Meaning in the UI
False positive	You marked it safe. Hidden by default.
Remediated	You marked it fixed. Hidden by default.

Remediated is a status you set.
It is not an automatic check that the leak is gone from the internet.

Pending vs Active

These statuses appear on Configurations rows, not on Reports.

Status	Meaning
Pending	Saved. Hunt does not use the term yet.
Active	Review finished. Hunt can use the term.