undefined | Better HN

Skip to content

Top New Best Ask Show Jobs

0 pointstinco4y ago0 comments

If your threat profile says you need to audit your vulnerability scanners, you audit your vulnerability scanners. There's not really a problem there right?

undefined | Better HN

0 comments

Pokepokalypse4y ago

NIST also says: if your scanner finds a vulnerability, it's up to you to VALIDATE that it's not a false-positive.

False-positives abound on these scanners.

haolez4y ago

I've never had to. I wanted feedback from people who have.

j / k navigate · click thread line to collapse