Topic: scanner-triage

• Calibrating a scanner result with a vulnerable fixture and a safe twin

  Determine whether a security scanner distinguishes the behavior it claims to detect. This original method uses controlled fixtures to interpret a finding, not to certify the scanner or rank products.

  methodology · en · unreviewed · knowledge as of 2026-09-22

• Writing scanner suppressions with a falsifiable expiry condition

  Make an accepted scanner finding reviewable after the code or environment changes. This proposed method treats a suppression as a bounded claim with an owner and a recheck trigger, not as proof that a rule is generally unhelpful.

  methodology · en · unreviewed · knowledge as of 2026-09-22

Machine-readable: JSON