Use filters to prioritize findings in Titan Secure

Titan Secure Continuous Monitoring is in beta. Features and behavior may change, and some functionality is still in development. To share feedback or report an issue, complete the support form.

Supply chain detections can include hundreds of thousands, or even millions, of findings across vendors. To help you prioritize the issues that matter most, we provide robust filtering options to narrow results and focus on findings you want to review or resolve with your vendors.

Using filters

Filters can be applied in both the Group by Name view and the Findings view. Filters applied at the group level persist when you drill down into the individual Finding. Any actions you take apply only to the currently filtered set of findings (at either level). You can filter both the organization and the finding data in the Open Findings view.

Organization filters

Use organization filters to limit findings by company or portfolio ownership.

Name	Type	Operators	Available to
Company Name	Multi-select	None	VRM
Portfolio	Multi-select	None	VRM

Finding filters

Use finding filters to refine results based on finding-specific attributes.

Name	Type	Operators	Available to
Flagged	Single-select	None	VRM
Threat level	Multi-select	None	VRM, Vendor
Vendor status	Multi-select	None	VRM
Asset type	Multi-select	None	VRM, Vendor
Type	Multi-select	None	VRM, Vendor
Status	Multi-select	None	VRM, Vendor
Last seen	Presets (last 24hrs, last 7 days, last 30 days, last 90 days) or Date Range	None	VRM, Vendor
Port number	Numeric value	is, is not, greater than, greater than or equal, less than, less than or equal	VRM, Vendor
Asset	String	None	VRM, Vendor
Finding name	String	None	VRM, Vendor
Requestors	Multi-select	None	Vendor

Vulnerability data

Vulnerability data filters enable numeric and categorical filtering of vulnerability findings.

Name	Type	Operators	Available to
CVSS Score	Numeric value (max = 10.0)	is, is not, greater than, greater than or equal, less than, less than or equal, in range	VRM, Vendor
EPSS Score	Numeric value (max = 1.0)	is, is not, greater than, greater than or equal, less than, less than or equal, in range	VRM, Vendor
Is CISA KEV	Single-select	None	VRM, Vendor

Create advanced filters

Advanced filters allow you to build precise, rule-based filter sets using conditional logic. This is useful when you need to focus on a very specific subset of findings, such as unflagged issues or high-risk vulnerabilities. These filters are evaluated using a Where clause. Each rule added under Where must be satisfied for a finding to appear in the results.

To create one, select Filters > Advanced Filters.

Each filter rule consists of:

A field (for example, Flagged)
A condition (such as equals, greater than, or in range)
A value (such as Yes or No)

In the example above, the filter returns only unflagged findings, allowing you to focus on items that have not yet been reviewed. Multiple filter rules can be added and combined to further narrow results.

Once you are done creating your filters, select Apply Filters to apply the current filter rules to the Findings list. You can select Clear all to remove all filter rules from the current filter set.

Save an advanced filter

You can save an advanced filter configuration as a filter preset for reuse. Saved presets retain all filter rules and values.

To create a preset, select Save and give the filter a unique name.

Saved presets are available from the Presets menu and can be renamed and applied later without rebuilding the filter.

Use system filter presets

System filter presets are SecurityScorecard-curated filter sets that give you a ready-made triage lens without having to build one yourself. You can access them from the Presets menu in every VRM observation view. When you open VRM Observations for the first time, the Emerging Threat Watch preset is applied automatically, so your landing view focuses on high-confidence emerging threats.

The following system presets are available to VRM users.

Preset	Focus	What it surfaces
Active Compromise Indicators	Investigate now	Signals that appear in both active compromises and authorized security testing, such as Cobalt Strike C2 beacons, information stealers, remote access tools, botnets, and website defacement. External observation establishes the signal but not its meaning, so confirm intent through direct vendor engagement.
Ransomware Kill Chain	Critical risk	Exposed services and vulnerable products that recur in ransomware post-mortems, such as RDP, SMB, VMware ESXi, Log4j, and Pulse Connect Secure VPN. One finding is an exposure; two or more match the infrastructure profile seen in real incidents.
No Credentials Required	Critical risk	Internet-accessible services that lack an authentication barrier, such as unauthenticated Elasticsearch and MongoDB, LDAP anonymous binding, exposed VNC and Telnet, and internet-accessible industrial control system devices.
Actively Exploited CVEs	Critical risk	Vulnerabilities that carry two independent confirmation signals: a CISA KEV designation and an EPSS score at or above 0.5. These reflect observed attacker behavior rather than theoretical severity, and a patch closes the finding.
Emerging Threat Watch	Proactive (default view)	High-severity CVEs not yet on CISA KEV but showing signals that weaponization is imminent: an EPSS score above 0.7, a CVSS score at or above 7.0, and a first-seen date within the last 30 days. This preset is applied as the default view on first visit.
New this week	Stay current	Vulnerabilities, compromise indicators, and insecure endpoints first seen on a vendor's attack surface within the last 7 days, with a CVSS floor of 7.0 for vulnerabilities. This is a change-detection lens rather than a severity assertion.

You can apply a system preset and then layer additional finding filters on top of it to further refine the results. You cannot delete, rename, or edit a system preset. To customize one, select Duplicate to add it to your saved filter, then edit the copy freely.

You can also set any preset as your default. Toggle Set as default on a system or personal preset so your landing view opens with the lens you prioritize.

Search for findings

Use the search to filter finding groups by Finding Name on the Supply Chain Findings page. Search works alongside filters to further reduce the visible results.