---
id: 9091
title: "What to Do With a Security Finding You Are Not Going to Fix"
source_domain: borghq.io
source_url: "https://borghq.io/blog/accepted-risk-security-finding-what-to-do-if-you-wont-fix"
published_at: "2026-10-12T16:13:44Z"
tags: ["defense", "methodology", "disclosure", "security", "credential-stuffing", "auth-security", "vulnerability-handling"]
phying_url: "https://phying.com/item/9091"
lang: en
---

# What to Do With a Security Finding You Are Not Going to Fix

## Summary

A finding you decide not to fix is still a decision. The difference between a false positive, an accepted risk and not yet, and what each one should record.

## Intelligence Metadata

- **Sources:** borghq.io
- **Published:** 2026-10-12T16:13:44Z
- **Original:** https://borghq.io/blog/accepted-risk-security-finding-what-to-do-if-you-wont-fix
- **Phying News:** https://phying.com/item/9091