FAQ: Understanding Your Results

Category: FAQ

What's the difference between Imminent Threats and Exposures?

• Exposures are vulnerabilities in your attack surface (things that could be exploited)
• Imminent Threats are exposures where attackers are actively preparing to exploit them - they require urgent attention

How do I prioritize which exposures to fix first?

1. Status: "Hijacked" and "Impersonated" are most urgent (red indicators)
2. Business Impact: Focus on "Financial Losses" or "Operational Disruption"
3. Attack Infrastructure: Exposures with associated clusters mean active attacker interest
4. Imminent Threats: Always prioritize these over regular exposures

What does "Prevented" mean?

A prevented exposure has been successfully remediated - either by Malanta's auto-remediation or by your team. It's no longer a risk.

What does the attack infrastructure cluster count mean?

If an exposure shows "2 Clusters", Malanta has identified 2 distinct groups of attacker infrastructure connected to it. More clusters typically means more sophisticated attacker activity.

Updated on: 26/02/2026