Skip to main content

​
Remediation Campaigns

Remediation Campaigns

Manage remediation campaigns from a centralized workspace

Remediation Campaigns consolidate related vulnerabilities into actionable remediation efforts, allowing security teams to resolve multiple findings through a single coordinated workflow. To begin working with a remediation campaign:
  1. Navigate to Prioritization
  2. Open the Remediation Campaigns section
  3. Select a campaign from the list
  4. Review campaign details and affected assets
  5. Track remediation progress
  6. Resolve vulnerabilities through the campaign workflow

​
Campaign Information

​
Campaign Dashboard

Campaign Dashboard

Monitor campaign health and remediation progress

The dashboard provides a centralized overview of campaign activity, including remediation status, affected assets, ownership, and campaign progress.

​
Dashboard Overview

Campaign Analytics

Visualize remediation trends and vulnerability distribution

Interactive charts provide visibility into:
  • Resolution timeline
  • Severity distribution
  • Vulnerability state distribution
  • Campaign progress

​
Campaign Assets

Campaign Assets

Review assets impacted by the remediation campaign

The Assets tab identifies every asset included in the selected campaign. Each asset displays:
  • Asset name
  • Vulnerability count
  • Associated component
  • Recommended remediation

​
Campaign Vulnerabilities

Campaign Vulnerabilities

View vulnerabilities included in the selected campaign

The Vulnerabilities tab lists every vulnerability associated with the campaign, allowing analysts to review severity, ownership, and remediation status from a single location.

​
False Positive Analysis

False Positive Analysis

Review and validate suspected false positives

False Positive Analysis helps analysts verify scanner findings before remediation begins.

​
Validation Process

  1. Open a flagged vulnerability
  2. Review AI-assisted analysis
  3. Validate the detection
  4. Mark as False Positive or Confirmed
  5. Save the review
Accurate false positive validation reduces unnecessary remediation effort while improving vulnerability data quality.

​
Risk Relevance Groups

Risk Relevance Groups

Organize vulnerabilities using contextual risk relevance groups

Risk Relevance Groups automatically classify vulnerabilities that share similar exploitation characteristics, enabling analysts to investigate related findings together.

​
Group Overview

​
Risk Group Dashboard

Risk Group Dashboard

Analyze remediation progress for a selected risk group

The dashboard provides visibility into:
  • Resolution trends
  • Severity distribution
  • Vulnerability lifecycle
  • Overall remediation progress

​
Group Vulnerabilities

Risk Group Vulnerabilities

Review vulnerabilities associated with the selected risk group

Each vulnerability includes:
  • Severity
  • Owner
  • Current status
  • Risk score

​
Group Actions

Risk Group Actions

Configure automation rules for the selected risk group

Automation rules can be attached directly to Risk Relevance Groups to streamline operational workflows. Supported actions include:
  • Assign ownership
  • Update vulnerability state
  • Execute custom workflows
  • Trigger automated actions
Rule Details

Review automation rule configuration

Each rule includes:
  • Trigger conditions
  • Execution policy
  • Configured actions
  • Matching criteria

​
About Risk Groups

Risk Group About

Understand the purpose of each risk relevance group

The About section explains the group’s purpose, associated exploitation characteristics, and recommended remediation approach.

​
True Risk

True Risk Overview

Configure organization-specific vulnerability prioritization

True Risk enables organizations to prioritize vulnerabilities using a customizable scoring model that combines technical severity with business context.

​
Configure Risk Scoring

True Risk Dashboard

Customize the overall True Risk scoring framework

The scoring framework combines multiple prioritization factors into a single risk score.

​
Available Risk Factors

​
Configure Individual Risk Categories

True Risk Configuration 1

Adjust CVSS and Exposure scoring

Configure weighting for:
  • CVSS Severity
  • Exposure Prioritization
True Risk Configuration 2

Configure SLA and EPSS scoring

Configure:
  • SLA compliance
  • EPSS probability scoring
True Risk Configuration 3

Configure KEV, Asset Type, and Business Unit scoring

Additional scoring factors include:
  • Known Exploited Vulnerabilities (KEV)
  • Asset Type Prioritization
  • Business Unit Risk
True Risk allows organizations to build a prioritization model that reflects their own operational, technical, and business requirements instead of relying solely on CVSS scores.

​
Explore Live Demo

Explore Vulnerability Prioritization — No Signup Needed

Experience how Snapsec prioritizes vulnerabilities using Remediation Campaigns, False Positive Analysis, Risk Relevance Groups, and True Risk scoring to help security teams focus on the vulnerabilities that matter most.