A finding opens when the condition appears and closes when it is gone.
The admin without MFA is one standing finding, ranked by what that account reaches.
Posture, risk findings

The gap that lets an attacker in is rarely exotic. It is an admin without MFA.
How it works
A finding is a standing condition. The scan opens it and the scan closes it when the misconfiguration is gone
Scans run every six hours, and a permission probe tells you which checks your consent reaches
Findings deduplicate on a stable key, and the same condition never reopens as a new item each cycle
Ask the specialist that owns this work.
Ask in your own words. The Risk Findings Agent runs as you, and any action it can take ships off until an admin turns it on.
Risk Findings Agent
Ranks and de-duplicates findings, scores user risk and computes blast radius for each exposure.
- You asked: What is our single riskiest exposure right now?
Nuvio answered: Your riskiest exposure is not the loudest one. This account holds a stale admin role and reaches 22 applications. Ranked and de-duplicated.
Waiting on youCreate a review scoped to that one account
Ask first is on for this action. The card runs once, expires in fifteen minutes, and only you can approve it.