Skip to main content

Configure dynamic scoring for Contrast Scan

Turning on dynamic scoring automatically adjusts the application score when you change the status for one or more scan vulnerabilities to Not a Problem. The application score no longer includes vulnerabilities with a status of Not a Problem.

The default setting for this option is disabled.

Before you begin

  • If role-based access control is turned on, you need a role with the Manage organization action.

  • If you are using organizational users and groups, you need the Organization Admin role.

  • Turning on dynamic scoring for applications with a large number of vulnerabilities can negatively affect performance in the Contrast web interface.

Steps

  1. Select Scans in the header.

  2. Select a scan project.

  3. Select the Settings icon (icon-settings.svg) at the top of the list.

  4. Select Dynamic Scoring.

    This image highlights the Dynamic Scoring option in the Scan project settings window.
  5. When prompted to do so, confirm that you want to turn on dynamic scoring by selecting Enable Dynamic Scoring.

    If dynamic scoring is turned on and you want to turn it off, select Disable Dynamic Scoring.

  6. In the Vulnerability tab for a scan project, select one or more vulnerabilities and change the status to Not a Problem.

  7. To view the updated score, go to the Overview tab for the scan project.

See also

Edit Scan vulnerability status

Batch edit Scan vulnerability status