Vulnerability remediation that actually closes

Validated findings across external, internal, cloud and code become evidence-backed issues routed to their owners, fixed by pull request with a regression test, and retested after merge, in one living context.

Get StartedBook a demo

Only what is real enters the backlog. Findings arrive Validated with proof and leave when the retest passes.

IssuesBoard
BoardListSLA
Triaging2
ISSUE-2048ML
Grafana admin reachable without SSO
HighReasoning
ISSUE-2044AC
IDOR on invoice download for org members
LowReasoning
Validated3
ISSUE-2041PR
Race condition in coupon redemption
High
ISSUE-2033SO
Password reset token reusable after use
Medium
ISSUE-2027JP
Public S3 bucket serving support uploads
Low
Fixed · Retesting3
ISSUE-2019ML
Team invite links valid after revocation
MediumRetesting
ISSUE-2011SO
Session cookie missing SameSite on SSO
LowRetesting
ISSUE-1998AC
Verification emails leak tenant names
Low

Every issue arrives with proof. Reproduction steps, the exchange that proved it, and an owner, in Linear or Jira.

IssuesRace condition in coupon redemption
ISSUE-2041

Race condition in coupon redemption

SeverityHigh
StatusValidated
AssigneePRPriya Raman
Owner fromCODEOWNERS
Filed toLinear SEC-342, 2d ago
Targetcheckout.acme.com/api/cart/apply-coupon
EvidenceActivityAssets
Reproduce
  1. 1Fetch a single-use code (WELCOME20) for a cart on checkout.acme.com.
  2. 2Send POST /api/cart/apply-coupon three times in parallel with the same code and cart token.
  3. 3All three return 200; the code is applied three times and the total drops to 0.00.
checkout.acme.com·apply-coupon · 3 parallel requestsOpen
1POST /api/cart/apply-coupon HTTP/2
2host: checkout.acme.com
3{ "code": "WELCOME20", "cart_token": "ct_9f2…41a" } // sent ×3, same instant
4
5HTTP/2 200 OK
6{ "applied": ["WELCOME20", "WELCOME20", "WELCOME20"],
7 "total": 0.00, "was": 128.00 }
SEC-342Race condition in coupon redemptionPR Priya RamanOpen
High Todo, Security

Fixes come as pull requests. The patch, a regression test that fails if it returns, and a live retest after merge.

IssuesRace condition in coupon redemption
Subscribed···
ISSUE-2041

Race condition in coupon redemption

StatusFixed
AssigneePRPriya Raman
Targetcheckout.acme.com/api/cart/apply-coupon
Fixacme/checkout #482
ActivityEvidenceAssets
  1. Pull request openedby Neo, 2d ago
    acme/checkout#482Make coupon redemption atomic+18−6Open
    42 const c = await db.coupon.findFirst({ where: { code, redeemed: false } });
    43 await db.coupon.update({ where: { id: c.id }, data: { redeemed: true } });
    42 const { count } = await db.coupon.updateMany({
    43 where: { code, redeemed: false }, data: { redeemed: true } });
    44 if (count === 0) throw new ConflictError('coupon already redeemed');
    test/coupon.regression.test.ts Passing
  2. MergedPriya Raman, 3h ago
  3. Retest passed2h ago

    Replayed the original exchange against checkout.acme.com: one 200, two 409.

SLA clocks run on proof. Every open issue shows time to breach by severity; nothing closes until the retest passes.

IssuesSLA
BoardListSLA
49Open
41Within SLA
6At risk
2Breached
9.4dMedian to verified fix
IssueTitleSeverityOwnerPolicyTime to breachState
ISSUE-2033Password reset token reusable after useMediumSOSam Okafor90dbreached 3dFix open
ISSUE-2048Grafana admin reachable without SSOHighMLMarco Lee30d2d leftFix open
ISSUE-2019Team invite links valid after revocationMediumMLMarco Lee90d41d leftRetesting
ISSUE-2027Public S3 bucket serving support uploadsLowJPJin Park180d96d leftValidated
ISSUE-2044IDOR on invoice download for org membersLowACAda Cruz180d152d leftValidated
Verified this week
ISSUE-2041Race condition in coupon redemptionHighPRPriya Raman30dmet in 19dVerified
ISSUE-2011Session cookie missing SameSite on SSOLowSOSam Okafor180dmet in 60dVerified
ISSUE-1998Verification emails leak tenant namesLowACAda Cruz180dmet in 12dVerified

Regressions reopen the original. When a fix stops holding, the finding links back to it and the owner is alerted.

IssuesRace condition in coupon redemption
Regression
ISSUE-2041 reopened

Race condition in coupon redemption

HighPR Priya Raman checkout.acme.com
Fixed42d ago
#482 merged, retest passed
Reopened14 min ago
a41c9f2 reproduced the exploit
SEC-342 reopened #securityPR Priya Raman notified
acme/checkouta41c9f2refactor(cart): extract CartServiceML Marco Lee
services/cart.ts
118 async redeemCoupon(code: string) {
119 const { count } = await db.coupon.updateMany({
120 where: { code, redeemed: false }, data: { redeemed: true } });
121 if (count === 0) throw new ConflictError('coupon already redeemed');
119 const c = await this.coupons.find(code);
120 if (c.redeemed) throw new ConflictError();
121 await this.coupons.markRedeemed(c.id); // no longer atomic
ActivityEvidenceAssets
  1. Retest reproduced the exploit14 min ago
  2. Reopened SEC-342Priya Raman notified
  3. Drafting a fix…

From finding to verified closure. Evidence the fix holds, an alert when it stops, and numbers leadership can trust.

Prove fixes with evidence

Closed means the original exploit was replayed against the patched target and failed. The before and after exchanges stay on the issue, so nobody has to take a fix on trust.

Catch regressions automatically

Fixed issues are retested on a schedule and whenever surrounding code or dependencies change. When one reproduces again, it reopens linked to the original, with the commit that undid the fix.

Report real risk reduction

Open backlog by team, service and severity; time to verified fix; SLA compliance and regression rate, all computed from retests rather than ticket states. Reports for engineering, leadership and auditors.

Trusted by security teams