Triage a security finding from a scanner, audit, advisory, pentest, bug bounty, or threat hunt into a defensible disposition. Use to validate false positives, contextualize severity, calculate/interpret CVSS v4.0, assess compensating controls, prioritize remediation, defer with controls, or document accepted risk.
