> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Prioritization

> Prioritize vulnerabilities using remediation campaigns, contextual risk analysis, false positive validation, and customizable risk scoring.

## Remediation Campaigns

<Frame caption="Manage remediation campaigns from a centralized workspace">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/prioritization-1.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=268f1fc7c717a299d656f191421ae70f" alt="Remediation Campaigns" width="1893" height="922" data-path="images/vm/prioritization-1.png" />
</Frame>

Remediation Campaigns consolidate related vulnerabilities into actionable remediation efforts, allowing security teams to resolve multiple findings through a single coordinated workflow.

To begin working with a remediation campaign:

1. Navigate to **Prioritization**
2. Open the **Remediation Campaigns** section
3. Select a campaign from the list
4. Review campaign details and affected assets
5. Track remediation progress
6. Resolve vulnerabilities through the campaign workflow

### Campaign Information

| Item            | Description                                                  |
| --------------- | ------------------------------------------------------------ |
| Campaign Name   | Name assigned to the remediation campaign                    |
| Vulnerabilities | Total vulnerabilities included in the campaign               |
| Assets          | Number of impacted assets                                    |
| Status          | Current remediation status                                   |
| Risk Reduction  | Estimated reduction in organizational risk after remediation |

***

## Campaign Dashboard

<Frame caption="Monitor campaign health and remediation progress">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-rem-campaigns.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=3e9ba904db7d3869f75432517951f3a3" alt="Campaign Dashboard" width="1607" height="867" data-path="images/vm/inside-rem-campaigns.png" />
</Frame>

The dashboard provides a centralized overview of campaign activity, including remediation status, affected assets, ownership, and campaign progress.

### Dashboard Overview

| Section               | Description                                            |
| --------------------- | ------------------------------------------------------ |
| Campaign Summary      | Displays campaign information and remediation progress |
| Risk Metrics          | Shows campaign impact and expected risk reduction      |
| Asset Summary         | Lists affected assets participating in the campaign    |
| Vulnerability Summary | Displays vulnerabilities included in the campaign      |

<Frame caption="Visualize remediation trends and vulnerability distribution">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-rem-campaigns-2.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=3bd5a80498a1b00e1dcb23b0ce418d22" alt="Campaign Analytics" width="1570" height="371" data-path="images/vm/inside-rem-campaigns-2.png" />
</Frame>

Interactive charts provide visibility into:

* Resolution timeline
* Severity distribution
* Vulnerability state distribution
* Campaign progress

***

## Campaign Assets

<Frame caption="Review assets impacted by the remediation campaign">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-rem-campaigns-3.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=1e4ed06195b9bb832f029277f9784652" alt="Campaign Assets" width="1616" height="761" data-path="images/vm/inside-rem-campaigns-3.png" />
</Frame>

The **Assets** tab identifies every asset included in the selected campaign.

Each asset displays:

* Asset name
* Vulnerability count
* Associated component
* Recommended remediation

***

## Campaign Vulnerabilities

<Frame caption="View vulnerabilities included in the selected campaign">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-rem-campaigns-4.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=9a73f0487a6ad97882e440644c2ac13f" alt="Campaign Vulnerabilities" width="1595" height="831" data-path="images/vm/inside-rem-campaigns-4.png" />
</Frame>

The **Vulnerabilities** tab lists every vulnerability associated with the campaign, allowing analysts to review severity, ownership, and remediation status from a single location.

***

## False Positive Analysis

<Frame caption="Review and validate suspected false positives">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/prioritization-2.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=05747f479180889349487cd395577a81" alt="False Positive Analysis" width="1902" height="925" data-path="images/vm/prioritization-2.png" />
</Frame>

False Positive Analysis helps analysts verify scanner findings before remediation begins.

### Validation Process

1. Open a flagged vulnerability
2. Review AI-assisted analysis
3. Validate the detection
4. Mark as False Positive or Confirmed
5. Save the review

<Callout icon="shield-check" color="blue">
  Accurate false positive validation reduces unnecessary remediation effort while improving vulnerability data quality.
</Callout>

***

## Risk Relevance Groups

<Frame caption="Organize vulnerabilities using contextual risk relevance groups">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/prioritization-3.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=8bf1137c0fd220e6f58a928f32d99c10" alt="Risk Relevance Groups" width="1890" height="886" data-path="images/vm/prioritization-3.png" />
</Frame>

Risk Relevance Groups automatically classify vulnerabilities that share similar exploitation characteristics, enabling analysts to investigate related findings together.

### Group Overview

| Item            | Description                                 |
| --------------- | ------------------------------------------- |
| Risk Group      | Logical grouping of related vulnerabilities |
| Vulnerabilities | Findings included in the group              |
| Risk Points     | Combined contextual risk score              |
| Status          | Current remediation progress                |

***

## Risk Group Dashboard

<Frame caption="Analyze remediation progress for a selected risk group">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-risk-relv-group1.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=51837314397a6df340bc86d9f4ca2b25" alt="Risk Group Dashboard" width="1653" height="858" data-path="images/vm/inside-risk-relv-group1.png" />
</Frame>

The dashboard provides visibility into:

* Resolution trends
* Severity distribution
* Vulnerability lifecycle
* Overall remediation progress

***

## Group Vulnerabilities

<Frame caption="Review vulnerabilities associated with the selected risk group">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-risk-relv-group2.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=1be35d63665af684908944c6116fcff4" alt="Risk Group Vulnerabilities" width="1632" height="693" data-path="images/vm/inside-risk-relv-group2.png" />
</Frame>

Each vulnerability includes:

* Severity
* Owner
* Current status
* Risk score

***

## Group Actions

<Frame caption="Configure automation rules for the selected risk group">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-risk-relv-group3.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=0653209deb0e5484fd6f57acb5979347" alt="Risk Group Actions" width="1635" height="635" data-path="images/vm/inside-risk-relv-group3.png" />
</Frame>

Automation rules can be attached directly to Risk Relevance Groups to streamline operational workflows.

Supported actions include:

* Assign ownership
* Update vulnerability state
* Execute custom workflows
* Trigger automated actions

<Frame caption="Review automation rule configuration">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-risk-relv-group4.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=a4ff298165e81d58d22a3daa48870a0a" alt="Rule Details" width="1622" height="903" data-path="images/vm/inside-risk-relv-group4.png" />
</Frame>

Each rule includes:

* Trigger conditions
* Execution policy
* Configured actions
* Matching criteria

***

## About Risk Groups

<Frame caption="Understand the purpose of each risk relevance group">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-risk-relv-group5.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=d4b42f0e279f4523a0d12afed3a711ca" alt="Risk Group About" width="1628" height="671" data-path="images/vm/inside-risk-relv-group5.png" />
</Frame>

The **About** section explains the group's purpose, associated exploitation characteristics, and recommended remediation approach.

***

## True Risk

<Frame caption="Configure organization-specific vulnerability prioritization">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/prioritization-4.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=221455156b0d5e81e81c56e038860149" alt="True Risk Overview" width="1912" height="907" data-path="images/vm/prioritization-4.png" />
</Frame>

True Risk enables organizations to prioritize vulnerabilities using a customizable scoring model that combines technical severity with business context.

***

## Configure Risk Scoring

<Frame caption="Customize the overall True Risk scoring framework">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-true-risk1.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=326ba1b77a3d3311f6d06161c60327cf" alt="True Risk Dashboard" width="1626" height="837" data-path="images/vm/inside-true-risk1.png" />
</Frame>

The scoring framework combines multiple prioritization factors into a single risk score.

### Available Risk Factors

| Factor        | Description                              |
| ------------- | ---------------------------------------- |
| CVSS          | Base vulnerability severity              |
| Exposure      | Internet-facing and internal exposure    |
| SLA           | SLA compliance and remediation deadlines |
| EPSS          | Exploit Prediction Scoring System        |
| KEV           | Known Exploited Vulnerabilities          |
| Asset Type    | Criticality based on asset category      |
| Business Unit | Organizational business impact           |

***

## Configure Individual Risk Categories

<Frame caption="Adjust CVSS and Exposure scoring">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-true-risk2.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=bf307977f0ca46d9f8a745727d7c1dd4" alt="True Risk Configuration 1" width="1628" height="787" data-path="images/vm/inside-true-risk2.png" />
</Frame>

Configure weighting for:

* CVSS Severity
* Exposure Prioritization

<Frame caption="Configure SLA and EPSS scoring">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-true-risk3.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=3d837d6157826779b9eb3e4f933eb3a4" alt="True Risk Configuration 2" width="1662" height="868" data-path="images/vm/inside-true-risk3.png" />
</Frame>

Configure:

* SLA compliance
* EPSS probability scoring

<Frame caption="Configure KEV, Asset Type, and Business Unit scoring">
  <img src="https://mintcdn.com/snapsec-23724fa2/TQqPQpQjhExfmt9p/images/vm/inside-true-risk4.png?fit=max&auto=format&n=TQqPQpQjhExfmt9p&q=85&s=33d002c06f14d189cb132493ecdc7023" alt="True Risk Configuration 3" width="1661" height="665" data-path="images/vm/inside-true-risk4.png" />
</Frame>

Additional scoring factors include:

* Known Exploited Vulnerabilities (KEV)
* Asset Type Prioritization
* Business Unit Risk

<Callout icon="chart-line" color="green">
  True Risk allows organizations to build a prioritization model that reflects their own operational, technical, and business requirements instead of relying solely on CVSS scores.
</Callout>

***

## Explore Live Demo

<Card title="Explore Vulnerability Prioritization — No Signup Needed" icon="wand-magic-sparkles" href="https://suite.snapsec.co/demo">
  Experience how Snapsec prioritizes vulnerabilities using Remediation Campaigns, False Positive Analysis, Risk Relevance Groups, and True Risk scoring to help security teams focus on the vulnerabilities that matter most.
</Card>
