Help Center/Importing scans & reports

Importing scans & reports

Your scanner already produces a weekly report; Patch Console turns it into work you can ship. Import the report and every actionable row becomes part of a patch group with a fix target, instead of a row in a spreadsheet.

What happens on import

The import wizard parses the report, dedupes CVEs, and maps each finding to a product that is actually installed on your fleet. Versions are normalized so "24.0.1" in the report and "24.0.1.0" on the device compare correctly. Rows that do not map to any installed software do not generate noise.

From findings to patch groups

Mapped findings are grouped per product with a fix target: the version at or above which the vulnerabilities are fixed. Severity is rolled up across the group's CVEs, so the queue reads "update Chrome on 42 devices", not four hundred CVE identifiers. Each group carries everything needed to deploy:

What a patch group carriesWhy it matters
ProductOne group per product, so the fix is one deployment, not one per CVE.
Fix target versionThe version the whole group is driven toward; the version gate and verification both measure against it.
Member devicesEvery device currently below the fix target, on either delivery channel.
Severity rollupThe worst severity and KEV/EPSS signals across the group's CVEs, used for ordering and SLA tracking.
SLA clockTime remaining against the severity's SLA tier. See Patch Report & Remediation Grade.

Devices that show up later

Groups are not frozen at import time. Each ingest re-checks the fleet, and a device that appears below the fix target after the group was created (a new enrollment, a reinstall, a rollback) is swept into the existing group automatically, so nothing slips through between imports.

Imports and the daily engine together

Imported scanner findings and the built-in vulnerability engine land in the same findings model and the same patch groups. The import brings in your scanner's view on its weekly cadence; the daily engine keeps the picture current in between, using the inventory the agent reports the moment software changes.

Import is repeat-safe: re-importing the same report updates existing findings rather than duplicating them.