Exposure management

Move findings into owned remediation work.

Create or import vulnerability findings, record their CVE and severity, connect affected assets, assign a person or team, and track workflow state and SLA due dates. The finding record keeps description and remediation guidance beside its status.