search

OWASP / off

OWASP Findings Format
13 stars 5 forks source link

Creating a priority field #3

Closed thesp0nge closed 4 years ago

thesp0nge commented 7 years ago

First of all, it's great having a standard for findings.

In my experience, I used also a 'priority' value to help developers during mitigation. I found that 'severity' can be sometimes misleading because of other circumstances

mkonda commented 6 years ago

Good call. I think we should add it too.