Findings

Findings brings everything risky in your workspace into one list, from every Dralvia product you use. Instead of checking the URL scanner, the repository scanner, email protection, and the smart contract scanner one at a time, you open Findings and see them together, ranked by severity.

What it is for

A single place to answer one question: what is risky in my workspace right now, and what still needs attention. Each row is one finding about one asset (a domain, a repository, an email sender, or a smart contract), with its severity, its status, the product that raised it, and when it was last seen.

Where to find it

Sign in, then open Findings from the Security Tools menu. You only ever see findings for your own workspace.

What a finding shows

• Asset: the domain, repository, email sender, or smart contract the finding is about.
• Severity: Low, Medium, High, or Critical, on one scale shared across every product so a High from the URL scanner and a High from the repository scanner mean the same thing.
• Status: where the finding is in its life, one of Open, Triaged, Suppressed, Remediated, or Verified remediated.
• Product: which Dralvia product raised it.
• Last seen: when the most recent scan last observed it.

How to use it

In the app:

1. Open Findings. The list shows your workspace's findings, most recently seen first.
2. Filter by product, severity, or status, or search by asset or title.
3. Select a row to open its detail, including the evidence behind the finding.

With the API (use your workspace sign-in):

• GET /portal/findings lists your findings. Optional query parameters: product, severity, status, asset_type, search, page, per_page (up to 100).
• GET /portal/findings/{id} returns one finding with its evidence.

Both endpoints return only your workspace's findings.

Severity

Severity comes from the same risk score each product already produces, mapped to one shared scale: Low for clean or minor signals, Medium and High for growing risk, and Critical for the strongest signals. Taking one scale across products lets you sort a mixed list and trust the order.

Status and remediation

A finding starts Open. As your team reviews it, it can become Triaged or Suppressed. When the risk is gone it becomes Remediated, and for repositories it can reach Verified remediated: when you rescan a repository and a finding that was there before is gone, Dralvia records that the fix was confirmed by the rescan, not just marked done by hand.

For a repository finding, the detail evidence also carries a triage summary — how many of that repository's findings are still active, verified remediated, reopened, or suppressed — so you can see remediation progress without leaving the list. If a fix you previously proved has come back, the repository finding is flagged as a regression (and its title says so): the finding stays Open because the risk is live again, and the evidence shows which fix regressed.

Why use it

One queue instead of many. You see the highest-risk items first, across every product, and you can prove progress as findings move from Open to Remediated.

Privacy

Findings are scoped to your workspace. A request only ever returns your own workspace's findings, and a finding that belongs to another workspace is never visible to you.

Limitations

Findings are drawn from scans you have already run. An asset appears here after the matching product has scanned it, so Findings reflects your scan history rather than continuously discovering new assets on its own. Availability: signed-in workspaces on Free Evaluation, Starter, Pro, and Enterprise.

API error quick reference

Status	Meaning	What to do
401	Not signed in	Sign in to your workspace and retry.
403	Signed in, but not permitted	Confirm your workspace role allows viewing findings.
404	Finding not found	The id does not exist in your workspace, or Findings is not available on your plan.
429	Too many requests	Slow down and retry after a short wait.
500	Service error	Retry shortly. If it persists, contact support.