Skip to main content

Priorities

Path: /priorities · Sidebar: Overview → Priorities

With thousands of findings, the question isn't "what's wrong?" - it's "what do I fix first?" The Priorities page answers that with a funnel that narrows your backlog down to the few issues that truly matter, plus an AI executive summary.

The funnel​

All findings
   └─ Reachable        (the code/endpoint is actually reachable)
        └─ Exploitable  (a working path exists)
             └─ KEV      (proven exploited in the wild)

Each stage filters out noise. By the bottom you're looking at a short list of genuinely dangerous, actionable issues - the "few that matter."

Exploit-confirmed boost​

Priority leans heavily on proven exploitability. Here, exploit confirmed means apPosture produced a working proof-of-exploit - not that an AI thought it looked exploitable. Proven issues rise to the top. A phantom-endpoint false-positive guard keeps non-existent endpoints from inflating the list.

AI executive summary​

A plain-English narrative of your current risk: what the biggest exposures are, why they matter to the business, and what to do next - suitable for sharing with leadership.

How to work it​

  1. Start at the bottom of the funnel (KEV / exploitable) and remediate.
  2. Use the AI summary to brief stakeholders.
  3. Cross-reference the Attack Map - fixing a choke point can clear several funnel items at once.
Last updated on