Please show the correct data as it is showing vulnerabilities have been discovered during testing and maintenance, but what is the criteria we have selected, please show as part of API implementation call and what is the calculation is being made for, If the developer do not know the implementation then design is marked for threat model tickets, development is marked for main scan tickets, testing and maintenance tickets are marked as resolved ticket when we mark from tickets tab. Hope the point is clear now. #13