Links

Deduplicator

Deduplicator can help streamline the vulnerability management process and save time by identifying and removing duplicate findings.

What is deduplication

Deduplication is the process of identifying and removing duplicate findings from multiple scanners. If an organization uses multiple scanners to test its software applications, the same vulnerabilities may be found by different scanners. In such cases, deduplication helps to identify the original findings and remove duplicates, thus streamlining the vulnerability management process.

How Deduplication works in AppSec Portal

Deduplicator overview
AppSec Portal's Deduplicator feature allows security engineers to set up deduplication rules based on specific criteria and instructions.
Once the deduplication rules have been set up, two sets of findings will be obtained: the originals and the duplicates. The originals will be the findings that are considered to be original scope, while the duplicates will be the findings that are repeated in different scanners (duplicate scope).
AppSec Portal then compares the duplicate findings with the original findings based on the specified fields. If any of the findings in the duplicate scope match a finding in the original scope according to the specified fields, that finding will be removed.

AppSec Portal's deduplication feature benefits

  1. 1.
    Streamlined vulnerability management: By removing duplicate findings, security engineers can focus on addressing the original findings, thus streamlining the vulnerability management process.
  2. 2.
    Better resource utilization: Removing duplicates frees up resources that can be utilized for addressing other vulnerabilities.
  3. 3.
    More accurate vulnerability reporting: Deduplication helps ensure that vulnerability reports are accurate and do not contain duplicate findings, which can skew the severity of the vulnerabilities detected.