Research Academy
My account Customers About Blog Careers Legal Contact Resellers

DAST

Issue statuses

  • Last updated: July 28, 2026

  • Read time: 2 Minutes

Burp Suite DAST tracks each issue across your scans and gives it a status. The status tells you where an issue is in its lifecycle, so you can see what the scanner has found and record your team's own assessment.

There are two kinds of status:

  • Scanner statuses - set automatically by the scanner, based on what it finds in each scan.
  • Your statuses - set by you, to record how your team has triaged the issue.

Scanner statuses

The scanner sets these statuses automatically. You cannot change them.

  • New - The scanner found this issue for the first time.
  • Present - The scanner found this issue again in the latest scan.
  • Regressed - The issue was previously resolved, but the scanner has found it again.
  • Fixed (confirmed) - The scanner re-tested the issue's location and confirmed that it is no longer present.
  • Inconclusive - The scanner could not conclusively test the issue, so its status is unconfirmed.

Your statuses

You can set one of the following statuses to record your team's assessment of an issue. For the steps, see Managing issues.

  • False positive - The issue is not a genuine vulnerability.
  • Accepted risk - The issue is a genuine vulnerability, but you have decided not to act on it. For example, it is mitigated by other security measures.
  • Verified risk - You have confirmed that the issue is a genuine vulnerability that needs remediation.
  • Fixed (unconfirmed) - You believe the issue is fixed, but the scanner has not yet confirmed it.

How scanner and your statuses work together

An issue has a single status at any time. Burp Suite DAST decides which status to show as follows:

  • If you have set a status, the issue shows your status.
  • If you have not set a status, the issue shows its scanner status from the latest scan.
  • When the scanner confirms that an issue is fixed, this takes precedence. The issue shows Fixed (confirmed), even if you set a different status.
  • When the scanner cannot conclusively re-test an issue, the issue shows Inconclusive.

To clear a status you have set and return an issue to its scanner status, select Use scanner status.

Related pages