How to Review Findings
Validated on 31 Mar 2026 • Last edited on 31 Mar 2026
Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.
After a scan completes, CSPM presents results as issues in the security experience. Issues group related findings together and help you understand what types of risks exist in your environment. Each issue corresponds to a specific security rule and may affect one or more resources.
View Scan Results
In the Control Panel, click Security in the left navigation.
The Security page opens with the Cloud Security Posture Management (CSPM) tab selected. On that tab, you see a summary of findings by severity and a list of detected issues.
Open an Issue
Click an issue in the list to open the issue details view. The details view includes:
- Severity level indicating the urgency of the issue.
- General details describing the issue.
- Technical details explaining how the issue is detected.
- Business impact describing the risk if the issue is not addressed.
Review Affected Resources
The Affected Resources section lists each resource impacted by the issue. Each entry includes the resource name, the last-seen timestamp, and the plan (if applicable). Each resource in this list represents an individual finding.
Prioritize Findings
Findings are grouped by severity. A practical approach is to address Critical and High findings first, review Medium findings based on their impact, and address Low findings over time as part of ongoing security improvement.
For an AI-assisted summary that helps you prioritize across your environment, see How to Use Security Advisor.
Take Action on Findings
After reviewing findings, you can:
- Follow the mitigation steps to resolve the issue. These steps describe where to go in the Control Panel, what configuration to update, and how to fix the issue. After you resolve an issue, the associated findings no longer appear in future scans.
- Use Quick Fix (available in paid plans) to remediate supported findings directly.
- Suppress findings that are not relevant to your environment.