Residual riskThe estimated risk that remains after verified controls, approved exceptions, and completed remediation are considered., business context, exploitation, exposure and evidence quality determine the order—not raw technical severity alone.
401 Unauthorized
The findings endpoint failed. Filtered totals and risk scores have not been estimated in the browser.