SecurityInsight settings · Settings > Guards
Vulnerability close limit (% of open records)
| Key | SI_VulnSync_MaxClosePercent |
|---|---|
| Where | Settings > Guards (safety checks) > Vulnerability connector checks |
| Type | int |
| Default | 10 % |
| Edition | pro |
What it does
The largest share of the open vulnerability records the connector may close in one run before it holds the closes for an Admin to release.
When set
A run that would close more than this share of the open records closes none of them and holds them (Guards page: release once). Only the records that really close count -- not first absences, held or out-of-scope records, and not closes a fresh Defender assessment confirms.
When blank or default
Left blank, the default applies: 10 %
Risk and how to reverse it
A safety check protects your data from a broken run; changing it changes when a step is held or stopped. Reversible at once.
Requires
Works only while "Vulnerability close limit" is on. A SecurityInsight Pro licence.
Recommended
Keep the default. Change it when: Raise it if your patch rounds regularly fix more than this share at once.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack