How Do I Report a False-Positive Finding?

The scanning methods applied for your websites are in industrial standards and are specially designed to give you the least number of false notifications. However, if you want to make an erroneous report regarding some findings, you can specify this in response to the e-mail sent by your organization or through the interface in accordance with the following criteria;

– The specific name of the vulnerability you want to report false-positive findings (For example, XSS or SSL Encryption etc.)

– URL link of the website on which you reported false-positive finding

– Scan result, screenshots and any other documents that show the findings are false-positive

Important Note: Any repots that do not comply with the above criteria will not be taken into consideration. You can make a notification based on only one (1) finding at the same time.