-
01 · VALIDATE
Confirm what is real
Ask a security expert or trusted AI to review the evidence, reproduce the issue, and confirm its scope and impact.
-
02 · PLAN
Fix the root cause
Group findings that share a cause. One authorization, validation, dependency, or configuration fix may resolve several issues.
-
03 · FIX
Apply every valid fix
Have the right engineer, security expert, or supervised AI implement each confirmed fix and review the resulting change.
-
04 · VERIFY
Prove it is resolved
Run NewScan again, or connect it through MCP so an AI assistant can rerun the check and verify the finding no longer reproduces.
Done means tested.
Do not close a finding because code changed. Close it when the original evidence cannot be reproduced and the surrounding behavior still works.