Skip to main content
Each confirmed vulnerability has a status. A vulnerability is a live record: its status, assignment, and supporting evidence can change as Antigen and your team work on it. There are five statuses:
  • Open: the vulnerability is openly exploitable and is not assigned to anyone working on it.
  • In progress: an agent or a person is working on the vulnerability.
  • Remediated: a fix is ready to verify.
  • Verified: an offensive agent, such as tCell, has confirmed that the original exploit no longer succeeds.
  • Accepted risk: your team has decided not to remediate the vulnerability.
On the Vulnerabilities page, you can view the same vulnerabilities as a board or a list. You can also query them through the API and configure hooks that respond when their status or assignment changes.

​
What moves a vulnerability forward

The lifecycle is driven by hooks. Hooks run when a vulnerability changes state or assignment. Antigen uses them to start its built-in triage and remediation workflows. You can use the same mechanism to connect your own agents and workflows. Read how triage works and how remediation works to see how the built-in workflows use the lifecycle.