Skip to content

Automatic data cleaning

The goal of Vulseek's data cleaning process is to keep data up-to-date and accurate by automatically removing records associated with assets that are no longer detected by Vulseek. This removal process is performed in the background without requiring user intervention.

Schedule

The removal process is run once every day automatically by Vulseek.

Types of records deleted

The following records are included in the removal process:

- Assets relations
- Assets
- Assets properties
- Findings
- Findings properties

Removal rules

There are several rules defined in the data cleaning process as each type of record to be deleted is treated differently. Records are deleted in the following order: assets relations, assets, assets properties, findings and findings properties.

Assets relations

Assets relations are automatically deleted if they were last discovered more than 7 days ago.

Assets

Assets are never deleted if they have custom vulnerabilities associated with them. Each asset has a configurable auto-deletion property. By default, all assets are configured according to their creation origin, which can be manual (if the asset was created by a user) or automatic (if it was detected by Vulseek). Manual assets are never deleted automatically by Vulseek. Using the new auto-deletion property, you can choose which assets will be considered for the automatic cleanup process and which will not, regardless of their creation origin.

Assets configured for auto-deletion are deleted if they were last discovered more than 60 days ago.

Hostnames and public IPs

Hostnames and public IPs are also deleted if ALL the following conditions are met:

  • They have been marked for auto-deletion.
  • They were created more than 1 day ago.
  • They are not related to any other asset.

Domains, public and private networks

Domains, public and private networks are assets that are always manually created by a user. For this reason, in the specific case of these asset types, the auto-deletion property cannot be configured, and they are never deleted by Vulseek since they are excluded from the automatic cleanup process.

Assets properties

Assets properties are automatically deleted if they were last discovered more than 120 days ago.

Findings

Findings are deleted if ALL the following conditions are met:

  • They do not belong to a custom vulnerability.
  • They were last discovered more than 120 days ago.

Automatic resolution of findings

Findings are automatically fixed if ALL the following conditions are met:

  • Their status is open or accepted.
  • They do not belong to a custom vulnerability.
  • They were last discovered more than 45 days ago.

Finding properties

Finding properties are automatically deleted if they were last discovered more than 120 days ago.