---
title: "Automate triage"
description: "Rules that verify, reject, merge, rate and close findings for you."
url: https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage
slug: appsec-portal/triage-findings/automate-triage
publish_date: 2026-10-30T19:42:15.000Z
last_modified: 2026-10-30T19:42:15.000Z
---

# Automate triage

Most findings that scanners report are either known false positives, duplicates, or the same kind
of finding you triaged yesterday. Rules handle them, so people only look at what's new.

| Rule | What it does | Runs |
| --- | --- | --- |
| [Auto Validator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-validator) | verifies, rejects or accepts Unverified findings; tags and groups them | on import and at an interval |
| [Deduplicator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/deduplicator) | keeps one finding when the same vulnerability is reported twice | basic deduplication on import, rules at an interval |
| [CVSS rules](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/cvss-rules) | sets the CVSS vector and with it the severity | at an interval |
| [Auto Closer](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-closer) | resolves or deletes findings that a scanner no longer reports | on import, per scanner |

Load the ready-made rule sets before the first scan, as described in
[First steps](https://whitespots.io/docs/appsec-portal/get-started/first-steps#3-load-the-triage-rules), and then add your own.

To change rules, a user needs the **Automation rules** permission (see
[Users and roles](https://whitespots.io/docs/appsec-portal/administration/users-and-roles)). The Auto Validator, Deduplicator and
CVSS rules need a paid license; the Auto Closer and basic deduplication don't. See
[License](https://whitespots.io/docs/appsec-portal/administration/license).

Each finding shows under **Affected by** which rules changed it, and each rule has
**View findings, processed by rule**.

---

## Navigation

- Location: [Docs](https://whitespots.io/docs) > [Application Security Portal](https://whitespots.io/docs/appsec-portal) > [Triage findings](https://whitespots.io/docs/appsec-portal/triage-findings)
- Previous: [Recommendations](https://whitespots.io/docs/appsec-portal/triage-findings/recommendations)
- Next: [Auto Validator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-validator)

### Pages in this section

- [Auto Validator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-validator)
- [Deduplicator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/deduplicator)
- [CVSS rules](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/cvss-rules)
- [Auto Closer](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-closer)