Security Exceptions

Manage security exceptions and exemptions for compliance checks that don’t apply to your environment.

Overview

Security Exceptions allow you to document and track intentional deviations from security compliance checks. When a compliance check fails but is acceptable for your use case, you can create an exception to acknowledge and track it.

Exception Status Types

How to Use

Creating an Exception

1. Navigate to Security > Security Scanning > Security Exceptions
2. Click the + Create Exception button
3. Fill in the exception details:
   • Select the check to exempt
   • Provide justification
   • Set an expiration date (optional)
4. Submit the exception

From Misconfigurations Page

You can also create exceptions directly from failed compliance checks:

1. Go to Security > Security Scanning > Misconfigurations
2. Find the failed check you want to exempt
3. Click to create an exception for that specific check

Managing Exceptions

• Search - Use the search bar to find exceptions by resource, namespace, or check ID
• Filter by Status - Use “All Status” dropdown to filter
• Filter by Check Type - Use “All Check Types” dropdown to filter

Best Practices

1. Document Justification - Always provide clear reasons for exceptions
2. Set Expiration Dates - Don’t let exceptions live forever
3. Regular Review - Periodically review active exceptions
4. Minimize Exceptions - Only create exceptions when truly necessary
5. Track Expired - Follow up on expired exceptions

Use Cases

Next Steps

• Misconfigurations - View compliance checks
• Secrets Scanning - Find exposed credentials