Issue Resolution page
The Issue Resolution page summarizes how your organization's issue posture has changed over a selected period: how many issues were resolved, how many new issues appeared, and how the two balance out. Where the Issue Diamond and Issue List show the current state of your issues, Issue Resolution is built to answer a different question: "what did we accomplish, and how fast?" This makes it useful for MSPs and internal security teams reporting on remediation progress to stakeholders or clients.
Navigate to Issues → Resolution to open the page. It sits alongside Diamond, List, and Projects in the Issues menu.
What This Does
The page gives you a single view combining summary metrics, a before/after posture comparison, and a filterable list of resolved, new, and open issues for any period you choose. From there you can export a client-ready PDF report or a detailed CSV for further analysis.
See also Issue trend metrics, a related report that also tracks issue counts over time.
How to Use It
Step 1: Select a reporting period.
Use the Period filter to choose a preset: Last 7 days, Last 30 days, Last month (the default), Last 90 days, or This quarter. There is no custom date range option.
Step 2: Narrow the results, if needed.
The filter bar also supports Issue Severity, Labels (asset labels), and Issue type. Filters apply to every section on the page: the summary cards, the posture change table, and the issue lists.
Step 3: Review the summary cards.
Four cards summarize the period at a glance:
| Card | Shows |
|---|---|
| Resolved | Number of issues resolved in the period, plus affected asset count and a severity breakdown (Critical/High/Medium/Low) on hover |
| New Issues | Number of issues first detected in the period, plus affected asset count and severity breakdown on hover |
| Net Change | The difference between resolved and new issues, with a direction indicator and severity breakdown on hover |
| MTTR | Median and average time to remediate (issue-level), plus the number of devices and issues the calculation covers |
Step 4: Compare posture before and after.
The Posture Change table shows open-issue counts at the start and end of the period, plus how many issues were resolved, how many are new, and the net change. Column headers show the actual period dates (e.g., a column may read "Jul 1" and the next "Jul 31").
Switch between three lenses using the buttons above the table:
- Severity: rows for Critical, High, Medium, Low, and a Total row
- Asset Priority: rows by asset priority tier
- Nanitor Priority: rows by issue priority (P0, P1, P2, and issues with no priority)
Step 5: Drill into the issue list.
Below the posture table, three tabs list the underlying issues:
- Resolved: issues resolved during the period, with Issue, Type, Severity, # Devices, First Seen At, Resolved At, NPS priority, TTR, and Reasons columns. Hover the information icon next to the tab name for a reminder of what "Resolved" means for the selected period.
- New: issues first detected during the period, with the same base columns plus a Status badge (Open, Resolved, or Excluded) showing what happened to the issue since.
- Open: issues still open at the end of the period, with an Age column (days since first seen) instead of Resolved At.
Click any issue title to open its Issue Details page. Expand a row (the chevron on the left) to see the per-device detail for that issue: hostname and first seen date (plus resolved date, on the Resolved tab). Hover over a hostname to see the standard asset information card (health score, state, labels, asset priority, and issue count), and click it to open the Asset Details page.
Step 6: Check Risk Accepted issues.
When the Resolved tab is active, a Risk Accepted section appears below the issue list, showing issues with an active exclusion during the period. Expand a row to see each acceptance record's creation date, expiry date ("Never" if none is set), the scope (specific assets and/or labels, or "No scope restrictions" if it applies organization-wide), who accepted it, and the justification comment.
Step 7: Export a report.
Click Export in the page's action menu (top right) to open the export dialog.
- CSV: exports the currently filtered data as a flat file, one row per issue-device combination. See CSV columns below.
- PDF: generates a "Resolution Summary" report. Choose:
- Detail level: Summary (overview, posture table, and top resolved/new items, roughly 5 pages) or Full Detail (summary plus a complete per-device issue breakdown).
- Date format: the date format used throughout the PDF.
- Include (optional): Active filter conditions (lists the applied labels, severity, and issue type filters on the cover page) and Risk accepted items (adds a Risk Accepted section to the report).
What You'll See
Resolution Summary PDF
The generated PDF opens with a cover page showing your organization name, the report period, and scope, followed by these sections. Section numbers shift depending on which optional sections are included (for example, Device Breakdown is omitted entirely outside Full Detail mode):
- Period Summary: a Resolution Overview with an auto-generated narrative sentence (e.g., "3,908 security issues were resolved across 26 device instances during this period, while 7 new issues were detected...") and KPI cards, a Severity Breakdown of resolved issues, a New Issues Detected breakdown, and a Time to Remediate section with the median time to fix and a day-range breakdown.
- Security Position - Before & After: the same before/after posture comparison shown on the page.
- Key Issues Resolved: the top 20 resolved issues, sorted by severity, with type, severity, affected asset count, and TTR.
- New Issues Detected: the top 20 newly detected issues, sorted by severity.
- Risk Accepted (if included): the top 20 risk-accepted issues by severity, with scope and justification.
- Device Breakdown (Full Detail only): a per-device listing of issue occurrences.
The PDF uses Nanitor's standard report branding pipeline, so your organization's logo appears alongside the Nanitor logo if a custom logo is configured.
CSV columns
The CSV contains one row per issue-device occurrence, covering resolved, new, and open issues (distinguished by the Status/Report Type columns) for the selected period and filters:
| Column | Description |
|---|---|
| Report Type | Whether the row represents a resolved, new, or open issue-device occurrence |
| Issue ID | The internal issue identifier |
| Issue Title | The issue name |
| Issue Type | The issue category (Vulnerability, Misconfiguration, Patch, Software Policy, PII, Device, or Identity) |
| Severity | The issue's severity level |
| NPS Priority | The Nanitor Prioritization Score priority band |
| Asset Hostname | The affected asset's hostname |
| Asset ID | The affected asset's internal identifier |
| First Seen | When the issue was first detected on this asset |
| Fixed Date | When the issue was resolved on this asset (blank if unresolved) |
| Days To Fix | Days between First Seen and Fixed Date (blank if unresolved) |
| Resolved Reason | Why the device-level issue was marked resolved (e.g., "Change", "Device archived", "Rule unassigned") |
| Status | The current state of the issue-device occurrence |
Common Questions
Q: Who can see the Issue Resolution page? A: Anyone with the View issues permission — the same permission that grants access to the Issue Diamond, Issue List, and Issue Details pages. There is no separate or higher permission required.
Q: Does the page flag issues resolved by a policy or benchmark change differently from issues that were actually fixed? A: Not distinctly. The Resolved tab's Reasons column lists the underlying resolution reason(s) (for example "Change", "Device archived", or "Rule unassigned") for transparency, but the page does not visually flag or exclude any particular reason. If a resolution reason matters to your reporting, use the Reasons column or the CSV's Resolved Reason column to review it.
Q: Why can't I pick a custom date range? A: Only preset periods (Last 7/30/90 days, Last month, This quarter) are available.
Q: What's the difference between this page's CSV/PDF export and the export on the Issue List page? A: They're separate exports with different content. The Issue List export (see Issue list export) exports whatever issues are currently visible in the flat issue list. The Resolution Summary export is period-based: it reports on resolution activity, posture change, and MTTR for the period you've selected here, and includes per-device rows rather than per-issue rows.