> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.method.security/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.method.security/_mcp/server.

# Filter, investigate, and close Findings

> Filter, investigate, and close Findings using Explorer, the Object graph, and Agents

Filter, investigate, and close Findings using Explorer, the Object graph, and Agents.

---

## The Findings app

The Findings app is your central view for triaging security findings. By default, it shows open, **Validated** Findings from the last 3 days.

A Validated Finding is one that [AI Agents](/platform/core-platform/agents) have confirmed as a real finding. This lets you focus on verified results rather than sorting through unverified noise.

![Findings app showing Validated Findings organized by severity with filter controls](/_fern-img/ebeb350c35624eb262d3d86017f831b81eebdd651dc01fcdd6e6a777f232318e.webp)

Use the tabs across the top to switch between **Validated**, **Urgent**, **Lingering**, **Stale**, or **All** Findings. The filter bar lets you further narrow results by:

* **Severity**: Critical, High, Medium, Low, or Info
* **Status**: Open or Closed
* **Validation**: Validated, Unvalidated, or All
* **Type**: Filter by specific Finding type tags
* **Environment**: Scope to a particular Environment or tagged group of Environments
* **First seen / Last seen**: Filter by time range

The left sidebar groups Findings by Finding type within each severity level, making it easy to spot patterns across your environments.

Change a Finding's status using the drop-down menu at the top-right corner of any Finding.

![Finding status dropdown showing Open and Closed options](/_fern-img/f84ed66039d9e4c950096548027c32740c8c8139ec292d9c56c62c39f1072ebb.webp)

## Advanced filtering in Explorer

Apply more advanced filters and filter groups to explore Findings across your environments using Explorer. See [Filter data](/guides/explorer/filter-data) for details.

## Investigate a Finding

Click into any Finding to open its detail panel. The **Summary** tab gives you a full picture at a glance:

* **Last seen and age**: When the Finding was last observed and how long it has been open
* **Finding details**: A description of the finding, its severity, validation status, the impacted Object, and remediation guidance
* **Related Investigations**: Past and ongoing Agent investigations tied to this Finding
* **Related Objects**: The Objects connected to the finding

Use the tabs to explore further: **Linked Objects** to see the full asset graph, **Reports** to generate exportable documentation, and **History** to track status changes over time.

![Finding detail view showing status, severity, remediation, related investigations, and related objects](/_fern-img/548fddf8945f9a4d0d5023686ac5b0f23b613409fc36d5c412d5bfc46179bbf5.webp)

The Related Objects graph visualizes how a Finding's impacted asset connects to other Objects in the [Ontology](/platform/core-platform/objects). Labeled edges show the relationships between Objects, such as an SSH Application running on a Host at a specific IP Address. Use the graph to understand blast radius, trace exposure chains, and identify affected dependencies.

![Linked Objects tab showing an IP Address object's properties and a Related Objects graph connecting DNS Records, Hosts, SSH Applications, and Ports](/_fern-img/81e283cdfe55816f760f108e10880fea5a7b5e2ab2bcb23a2d43a3d44c4d8480.webp)

## Investigate Findings with Agents

From any Finding, click **Send to Agent** to kick off an Agent investigation. Select an Agent and optionally provide additional context to guide its analysis. The Agent will investigate the Finding, then report back with findings, validation, and recommended next steps.

![Finding detail panel with Send to Agent button highlighted](/_fern-img/f9fce85ce6d946be2fb8d4385597d7ee8b419cff57b72c079cfc9b309afbc9dd.webp)![Start an Agent modal showing Agent name, description, system prompt, and additional context field](/_fern-img/d33f476069523fdd1e49d1469d9ffa2083b6fc8d577669ba4bd9c27d989504c8.webp)

Once started, the Agent begins its investigation. [Policies](/guides/agents/create-a-policy) govern what each Agent can do: a Tool call may be automatically approved, denied, or held for your approval depending on the rules you configure. Monitor progress in real time from the **Agent Fleet** app.

![Agent Fleet conversation view showing investigation results, severity confirmation, and generated report](/_fern-img/237bc01c5e510d9aeada2677b2dda857215b1cb715231be836b849a8e6d9b47e.webp)

![Agent Fleet showing multiple concurrent Agent investigations](/_fern-img/45d13c777caa8f32d3cade7a0e13e17feda7005bcd1ffa1a0ce6b44063abf5d5.webp)

> **Note**
>
> For more on creating and configuring Agents, see [Create an Agent](/guides/agents/create-an-agent).