---
title: "Finding groups"
description: "Group the findings of a product that are fixed together, and track them as one epic in the task tracker."
url: https://whitespots.io/docs/appsec-portal/triage-findings/finding-groups
slug: appsec-portal/triage-findings/finding-groups
publish_date: 2026-10-30T19:42:15.000Z
last_modified: 2026-10-30T19:42:15.000Z
---

# Finding groups

A finding group collects findings of one product that belong together: the findings of one
vulnerable library, of one release, or of one fix that a team plans. A finding can be in several
groups.

Open a product and click **Finding Groups** in the sidebar.

## Create a group

Click **Add Group** and enter its **Title**. Then add findings:

- in [Findings](https://whitespots.io/docs/appsec-portal/triage-findings/findings), select them and choose **Add groups**. Typing a name that isn't a
  group yet creates it;
- with an [Auto Validator](https://whitespots.io/docs/appsec-portal/triage-findings/automate-triage/auto-validator) rule that groups the findings it
  matches. The rule creates the group in each product where it finds such findings.

<video src="https://whitespots.io/api/image/fdc55374b3b693571f04f3096c0997a3.mp4" width="1440" height="900" class="shot-light" autoplay muted loop playsinline controls></video>
<video src="https://whitespots.io/api/image/e19a0f8428f565f94e49e09cffd3dbbc.mp4" width="1440" height="900" class="shot-dark" autoplay muted loop playsinline controls></video>

The group's page lists its findings, with the same filters and actions as other finding lists.
**Remove groups** in the list takes findings out of a group.

## Epics in the task tracker

With a [task tracker](https://whitespots.io/docs/appsec-portal/integrations/task-trackers) integration, a group can have an epic in
each tracker project. Create it on the group's page under **Task tracker epics**.

**Create tracker tasks for findings** decides what the epic holds:

- on: each finding of the group gets its own task, linked to the epic;
- off: the findings are only listed in the epic's description, with no task of their own.

An Auto Validator rule that creates tasks on verification still creates them when this is off.

Deleting an epic keeps the tasks of the findings.

---

## Navigation

- Location: [Docs](https://whitespots.io/docs) > [Application Security Portal](https://whitespots.io/docs/appsec-portal) > [Triage findings](https://whitespots.io/docs/appsec-portal/triage-findings)
- Previous: [A finding](https://whitespots.io/docs/appsec-portal/triage-findings/finding)
- Next: [Recommendations](https://whitespots.io/docs/appsec-portal/triage-findings/recommendations)