Skip to main content
Security teams deal with a constant stream of findings from scanners, pentest reports, CVE advisories, and bug bounty submissions. Most of it is noise. Vuln triage validates each finding against your environment and ranks what matters by exploitability and blast radius. There are two ways to start:
  • Triage inbox: connect a source, review the queue, and send reports to Neo
  • Paste or attach: drop a report into the Vuln triage workflow form on the Neo home screen

​
Triage inbox

Open Triage when reports already live in a connected platform.
SourceConnect withReview
HackerOneOrganization API tokenA program’s report queue
GitHub Security AdvisoriesNeo GitHub AppRepository advisories
1

Connect a source

  • HackerOne: enter your organization API token in Triage. Details in the HackerOne guide.
  • GitHub: install and claim the Neo GitHub App. Details in Install & Connect.
2

Choose a program or repository

Select the HackerOne program, or GitHub account and repository, to load.
3

Review and send to Neo

Filter the queue, open a report, and start triage. Neo creates a background task so you can keep working the inbox.

​
Paste or attach a report

Use this for scanner output, CVE lists, pentest write-ups, or anything not already in a connected inbox. Click Vuln triage on the Neo home screen.
1

Paste or attach the report

Paste the raw content, or attach a file below the text field. Neo reads it as-is.
2

Add credentials (optional)

Select secrets for authenticated testing. Without them, Neo can only check unauthenticated surfaces. Add secrets under Settings → Secrets if needed.
Click Start triage when ready.