Titan AI is in beta. Features and behavior may change, and some functionality is still in development. To share feedback or report an issue, complete the support form.
Vendor responses reflect the current engagement status after a finding has been flagged or a remediation request has been sent. These responses appear as the finding’s Vendor Status, which updates as actions are taken and reviewed.
Status lifecycle groups
At any given time, a finding has one of the statuses listed below. These statuses fall into three lifecycle groups.
Open
Open statuses indicate the finding is active and requires action.
- Open
- Reopened
- Investigating
Pending SSC Review
Pending statuses indicate that a response has been submitted and is awaiting review by SecurityScorecard (SSC).
- Compensating Control
- Fixed
- Cannot Reproduce
Resolved
Resolved statuses indicate that SSC has reviewed and closed the finding.
- Compensating Control
- Fixed
- Cannot Reproduce
Vendor status definitions
Vendor Status consists of a primary status and, in some cases, a more specific substatus. The primary status represents the finding's position in the lifecycle (Open, Pending, Resolved), while the substatus provides additional detail about the current activity or outcome.
The Updated by column indicates whether the vendor or SecurityScorecard initiated the status change as part of the validation and review process.
| Primary status | Vendor status | Definition | Updated by |
| Open | Open | The finding is active and has not yet been addressed or reviewed. | SecurityScorecard |
| Open | Reopened | A previously submitted status update (e.g., a compensating control) was not approved by SSC and requires further action. | SecurityScorecard |
| In progress | Investigating | The finding has been acknowledged and is under review before further action. | Vendor |
| Pending SSC Review | Compensating Control | A compensating control has been submitted and is awaiting SSC review. The finding will transition to Compensating Control if accepted or Reopened if not validated. | Vendor |
| Pending SSC Review | Fixed | The issue has been reported as fixed and is awaiting SSC confirmation as Fixed or Reopened. | Vendor |
| Pending SSC Review | Cannot Reproduce | The issue has been reported as not reproducible and is awaiting SSC confirmation to mark it as Cannot Reproduce or Reopened. | Vendor |
| Resolved | Compensating Control | The submitted compensating control has been reviewed and accepted by SSC. This finding is considered to be resolved. | SecurityScorecard |
| Resolved | Fixed | SSC scanning verified the finding as fixed. | SecurityScorecard |
| Resolved | Cannot Reproduce | The issue has been reviewed and accepted as not reproducible. SSC has reviewed and accepted this status. | SecurityScorecard |