Exposures

Path: /exposures

An exposure is a leaked credential or sensitive value: password, secret, token, PII, PHI, credit card number, or similar.
Severity is a number from 0 to 10. A higher number is more urgent.

Reports include ownership. See Objects and terms.

Summary

The page shows:

• Total exposures
• Unalerted exposures
• Unremediated exposures

Search

Use Advanced Search to filter by:

• Secret type
• Severity
• Repository link
• File reference
• Alerted
• Remediated
• False positives (hidden by default)

Views

Choose flat or grouped.

Grouped view can group by:

• Secret type
• Repository
• File reference
• Severity
• Remediation status

Status actions

Select one or more rows. Then:

• Mark False positive or undo that mark
• Mark Remediated or undo that mark

False positives are findings that are not a valid exposure for your organization. They are hidden by default.
Remediated items are fixed and hidden by default so you can focus on open work.

You can also change these flags on a single row.

Export

Select Export CSV to download the current filter set.

The CSV columns are:

• Type
• File
• Line
• Repository
• Severity
• False Positive
• Alerted
• Remediated

Empty list

If the list is empty, confirm a domain row exists and Status is Active.
If it stays empty, send email to support@exploitstrike.com.
See Configurations.