--- title: What Is The Process For Investigating False-Positives & False-Negatives? description: Edgescan validates that vulnerabilities presented in the platform actually pose a risk to your scoped assets. --- [Skip to content](https://kb.edgescan.com/knowledge/what-is-a-false-positive#main-content) English Show submenu for translations [![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/) Open main navigation Close main navigation - English Show submenu for translations Search the Edgescan knowledge base - There are no suggestions because the search field is empty. 1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en) 2. [Vulnerability Management](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en) 3. [False Positives & Negatives](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#false-positives-negatives) # What Is The Process For Investigating False-Positives & False-Negatives? ## Edgescan validates that vulnerabilities presented in the platform actually pose a risk to your scoped assets. Version Number: v1.0.1 Published Date: 14 May 2024 \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ Process for investigating **false negatives** - Gather relevant information - What is the vulnerability - Where was it identified (URL, host/port etc.) - When was it identified - How was is identified (manual testing techniques/automated scanning) - What level of scanning and testing does the target receive in edgescan - Does the currently assigned license cover the level of testing that would be required to identify such a vulnerability. - Are there any bespoke exclusions in place on the asset which could limit the coverage. - Review assessment(s) that overlap with when the vulnerability is likely to have been present - Which automated tools were used - What manual testing steps were performed - Determine whether or not the location was discovered during crawling/discovery - If the location was not explored during crawling, check that the resource was in scope. - If not in scope, check if the resource was required to interact with an in scope component. - Are there any bespoke exclusions which could have omitted this from crawling. - If asset is authenticated, does our test account have permission to access the vulnerable resource. - Determine whether or not the specific vulnerability was tested for - Does our automated scanner have any test for the vulnerability in question - Does our scanner have a test that may be incomplete, or may have failed to detect due to some custom/bespoke element of the target environment - If a manual test, does it fall into our existing methodology - If we conclude that it was missed by one of our scanners: - Escalate with scan maintenance team to see if it’s possible to create a new test (or enhance an existing one) - Determine timelines (to allow for preprod testing, QA, deployment) - If we conclude that is was missed during manual testing: - Ensure any methodology gaps are filled in and documented for future tests - Roll out appropriate training to update the pentesting team   Process for investigating **false positives** - Gather relevant information - On what basis is the veracity of the vulnerability being contested - Determine if we agree with the case being made - If it relates to mitigations/controls that we cannot see, then we can close the issue based on the clients testimony (and we note the reason for closure in the vulnerability). - If it relates to an imperfect test or testing methodology (and if we can prove that is the case), then we update our methodology accordingly. - [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content) - [Quick Start Checklist](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start-checklist) - [Onboarding](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#onboarding) - [Training & References](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#training-references) - [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content) - [What is ASM?](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#what-is-asm) - [Creating a new Investigation](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#creating-a-new-investigation) - [API Discovery](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#api-discovery) - [Vulnerability Management](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#main-content) - [SLA Settings](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#sla-settings) - [False Positives & Negatives](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#false-positives-negatives) - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#vulnerability-risk-ratings) - [Generating a retest link](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#generating-a-retest-link) - [Discarding Vulnerabilities](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#discarding-vulnerabilities) - [Scanning & Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#main-content) - [Scanning](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#scanning) - [Internal Testing Via Jumpbox](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#internal-testing-via-jumpbox) - [Scope Configuration](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#scope-configuration) - [API Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#api-testing) - [Penetration Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#penetration-testing) - [Authenticated Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#authenticated-testing) - [Mobile Application Security Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#mobile-application-security-testing) - [Scheduling Scans](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#scheduling-scans) - [Retesting](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#retesting) - [Agentic PTaaS](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#agentic-ptaas) - [Artificial Intelligence](https://kb.edgescan.com/knowledge/artificial-intelligence?hsLang=en#main-content) - [Getting Started](https://kb.edgescan.com/knowledge/artificial-intelligence?hsLang=en#getting-started) - [AI Insight Categories](https://kb.edgescan.com/knowledge/artificial-intelligence?hsLang=en#ai-insight-categories) - [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content) - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation) - [Asset Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-management) - [API Configuration](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#api-configuration) - [Events & Notifications](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#events-notifications) - [Accessibility Functions](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#accessibility-functions) - [Asset Tags](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-tags) - [Asset Audit Trails](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-audit-trails) - [Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#dashboards) - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers) - [Reporting](https://kb.edgescan.com/knowledge/reporting?hsLang=en#main-content) - [Scheduled Exports](https://kb.edgescan.com/knowledge/reporting?hsLang=en#scheduled-exports) - [Creating reports](https://kb.edgescan.com/knowledge/reporting?hsLang=en#creating-reports) - [PCI Attestation Reporting](https://kb.edgescan.com/knowledge/reporting?hsLang=en#pci-attestation-reporting) - [Licence Management](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#main-content) - [Licence Coverage](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-coverage) - [Licence Reporting](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-reporting) - [Licence Suggestions](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-suggestions) - [Licence Optimization](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-optimization) - [Licence Auto-Renewals](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-auto-renewals) - [Integrations](https://kb.edgescan.com/knowledge/integrations?hsLang=en#main-content) - [API Documentation](https://kb.edgescan.com/knowledge/integrations?hsLang=en#api-documentation) - [Splunk](https://kb.edgescan.com/knowledge/integrations?hsLang=en#splunk) - [Microsoft](https://kb.edgescan.com/knowledge/integrations?hsLang=en#microsoft) - [Amazon](https://kb.edgescan.com/knowledge/integrations?hsLang=en#amazon) - [DevOps & CI/CD](https://kb.edgescan.com/knowledge/integrations?hsLang=en#devops-ci-cd) - [Atlassian](https://kb.edgescan.com/knowledge/integrations?hsLang=en#atlassian) - [DefectDojo](https://kb.edgescan.com/knowledge/integrations?hsLang=en#defectdojo) - [ServiceNow](https://kb.edgescan.com/knowledge/integrations?hsLang=en#servicenow) - [Slack](https://kb.edgescan.com/knowledge/integrations?hsLang=en#slack) - [Palo Alto](https://kb.edgescan.com/knowledge/integrations?hsLang=en#palo-alto) - [Axonius](https://kb.edgescan.com/knowledge/integrations?hsLang=en#axonius) - [Google](https://kb.edgescan.com/knowledge/integrations?hsLang=en#google) - [FreshServices](https://kb.edgescan.com/knowledge/integrations?hsLang=en#freshservices) - [Cisco](https://kb.edgescan.com/knowledge/integrations?hsLang=en#cisco) - [Salesforce](https://kb.edgescan.com/knowledge/integrations?hsLang=en#salesforce) - [Zapier](https://kb.edgescan.com/knowledge/integrations?hsLang=en#zapier) - [User Administration](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#main-content) - [Users Quickstart](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#users-quickstart) - [Roles Management](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#roles-management) - [User Account Management](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#user-account-management) - [Account Settings](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#account-settings) - [Advanced Features & Customizations](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#main-content) - [JumpBox Deployment](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#jumpbox-deployment) - [Asset Prioritization](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#asset-prioritization) - [Notification Systems](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#notification-systems) - [Organization Settings](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#organization-settings) - [CloudHook](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#cloudhook) - [Scanning by AWS tags](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#scanning-by-aws-tags) - [WAF Rule Generation](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#waf-rule-generation) - [Edgescan Atomic](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#edgescan-atomic) - [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content) - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates) - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates) - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates) - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates) - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes) [![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com) Copyright © 2026 Edgescan. All rights reserved.