> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neo.projectdiscovery.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Vuln triage

> Cut through noise: rank findings by true exploitability and blast radius

Security teams deal with a constant stream of findings from scanners, pentest reports, CVE advisories, and bug bounty submissions. Most of it is noise. Vuln triage validates each finding against your environment and ranks what matters by exploitability and blast radius.

There are two ways to start:

* **Triage inbox**: connect a source, review the queue, and send reports to Neo
* **Paste or attach**: drop a report into the Vuln triage workflow form on the Neo home screen

## Triage inbox

Open [Triage](https://neo.projectdiscovery.io/triage) when reports already live in a connected platform.

| Source                         | Connect with           | Review                   |
| :----------------------------- | :--------------------- | :----------------------- |
| **HackerOne**                  | Organization API token | A program's report queue |
| **GitHub Security Advisories** | Neo GitHub App         | Repository advisories    |

<Steps>
  <Step title="Connect a source">
    * **HackerOne**: enter your organization API token in Triage. Details in the [HackerOne](/integrations/hackerone) guide.
    * **GitHub**: install and claim the Neo GitHub App. Details in [Install & Connect](/integrations/github-install-and-connect).
  </Step>

  <Step title="Choose a program or repository">
    Select the HackerOne program, or GitHub account and repository, to load.
  </Step>

  <Step title="Review and send to Neo">
    Filter the queue, open a report, and start triage. Neo creates a background task so you can keep working the inbox.
  </Step>
</Steps>

## Paste or attach a report

Use this for scanner output, CVE lists, pentest write-ups, or anything not already in a connected inbox.

Click **Vuln triage** on the Neo home screen.

<Steps>
  <Step title="Paste or attach the report">
    Paste the raw content, or attach a file below the text field. Neo reads it as-is.
  </Step>

  <Step title="Add credentials (optional)">
    Select secrets for authenticated testing. Without them, Neo can only check unauthenticated surfaces. Add secrets under **Settings → Secrets** if needed.
  </Step>
</Steps>

Click **Start triage** when ready.