Skip to main content
For AI agents: a documentation index is available at https://docs.coverbase.com/llms.txt. This page is also available in markdown by appending .md to the URL.
Findings Manager sits on top of the issues raised across all of your assessments. Rather than treating each finding as an isolated to-do, it tracks remediation outcomes over time and surfaces the systemic patterns that span vendors, control sets, and risk domains, so recurring weaknesses become visible instead of being closed one ticket at a time.

What it does

Cross-assessment aggregation

Roll up findings from every assessment, and from documents, contracts and Radar, into a single view grouped by vendor, control set, assignee or risk level.

Remediation tracking

Track each finding from open through remediation and verification, including vendor commitments, owners, due dates, and time-bound risk acceptances.

Systemic pattern detection

See recurring weaknesses across the portfolio by grouping on control set or vendor: the same control failing across many vendors, or one vendor repeatedly missing the same requirement.

Severity and risk scoring

Score findings by severity and urgency, or set the risk level directly, and let the risk level set the due date so reviewers spend time on the findings that matter most.

How to integrate

Findings API

List, create, retrieve, and status-sync findings programmatically across assessments and vendors.

Export API

Pull findings into your GRC platform, ticketing system, or executive dashboards for remediation reporting.

MCP Server

Ask about findings conversationally. “Which open findings are tied to encryption controls?” or “Show me every vendor with an overdue remediation.”

Webhooks

Subscribe to Finding.* events and react when findings are created, updated, or resolved.

Common workflows

Remediation campaign tracking

Save a filtered view of related findings (for example, every vendor missing a data-breach notification commitment), assign owners, request commitments per vendor, and track closure together rather than as scattered tickets.
Feed aggregated findings into executive and board reporting. Highlight the controls that fail most often across the portfolio so investment goes where it reduces the most risk.
Sync findings to Jira, ServiceNow, or your issue tracker via the Export API and webhooks, keeping remediation work where your teams already operate while Coverbase remains the system of record.
Findings are surfaced through the Findings API, the Export API, and the MCP server. They are raised from the issues Assessment Copilot finds, and from documents, contracts, Radar and other product surfaces. How to work them is in Findings and remediation.