Post-Release Tracking
Post-release tracking makes sure that a fix works after you release it.
Fix verification reminder
Every day, a scheduled job finds reports with status RESOLVED that were resolved 30 or more days ago and have no reminder yet. CVD Portal then sends one email to each admin of the company. The email asks the admin to verify the fix.
Verify the fix
- Open the report in Submissions.
- Click Verify fix is holding in production, add a note, and click Confirm verified.
The report must have status RESOLVED and a Fix or Workaround remediation decision. CVD Portal records the verification time and the note, and writes an entry in the audit log.
Exploitation after disclosure
On the Enterprise plan, when a report has an advisory with a CVE ID, a daily job checks public sources for exploitation evidence. The report page shows the result. See Exploitation Signals.
Limits
CVD Portal does not measure patch adoption and does not manage bug bounty payments.