Findings
Understand vulnerability findings, severity levels, and remediation guidance.
Findings are verified vulnerabilities discovered during penetration tests. Every finding includes proof-of-concept evidence and actionable remediation steps.
In this section
Understanding Findings
What's in a finding and how to interpret it.
Severity Levels
How CodeWall rates vulnerability severity.
Remediation
Acting on findings to fix vulnerabilities.
Importing findings from external scanners
You can import findings from Nessus or Qualys XML scan exports into CodeWall. This lets you consolidate vulnerability data from multiple sources into a single view.
Supported scanners
| Scanner | File Format |
|---|---|
| Nessus | .nessus XML export |
| Qualys | Qualys XML export |
How to import
- Navigate to Findings
- Click Import
- Select the scanner type (Nessus or Qualys)
- Upload the XML file (max 50 MB)
- Select the project to associate the findings with
- Click Import
Imported findings are deduplicated by fingerprint — if a finding with the same signature already exists, it will not be duplicated. A synthetic test run is created to group the imported findings.
API import
You can also import via the API:
curl -X POST https://api.codewall.ai/v1/findings/import \
-H "Authorization: Bearer YOUR_API_KEY" \
-F "file=@scan_results.xml" \
-F "tool=nessus" \
-F "project_id=proj_abc123"