Vulnerabilities
The Vulnerabilities view is the register of everything the agent confirmed during an engagement. Each entry is backed by concrete evidence from the run — not a keyword match or a "possible" issue.
What a finding contains
Every confirmed finding carries the detail a report needs:
| Field | Description |
|---|---|
| Severity | Critical, High, Medium, Low, or Info. |
| Title | A short name for the issue. |
| Host & endpoints | The affected host and every endpoint involved. |
| Service / tech | The service and technology in play. |
| Detail | A technical description of the issue. |
| Evidence | The proof — request/response pairs or command output. |
| Commands | The exact commands that proved it. |
| Credentials | Any credentials obtained (when applicable). |
| Business impact | What it means for the client. |
| Plain-language | A non-technical explanation. |
| Remediation | How to fix it. |
| CVE / CVSS | Reference and score, where relevant. |
Ranked by severity
Findings are ordered by severity so the most serious issues are at the top:
The Vulnerabilities nav item shows a live count that grows as the agent confirms more issues during a mission.
Evidence-first
Because AgentRidge only records a finding once it has proven it in the current run, the register is safe to hand to a client: each entry can be reproduced from the exact commands and evidence it carries. Those same findings drive the live map and the PDF report.
Next: Reports →