> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/security-issues.md).

# Security issues

Security issues are instances of problematic code in applications that help you identify bad practices and potential issues that could result in vulnerabilities. These issues may not currently affect the security of your application, but they could become problematic in the future.

## Enabling / disabling security issues <a href="#enabling--disabling-security-issues" id="enabling--disabling-security-issues"></a>

By default, Qwiet AI by Harness enables security findings for all new accounts. However, org owners and super admins can turn security issues on or off at the organization level for existing accounts. To do so:

1. Navigate to **Organization** > **Settings**.
2. Under **Security Issues**, toggle the switch on to enable security findings or off to disable security findings.

## Viewing security issues <a href="#viewing-security-issues" id="viewing-security-issues"></a>

To view the security issues for your application:

1. Log in to the Qwiet AI by Harness dashboard.
2. In the list of applications that Qwiet AI by Harness associates with your org, select the application of your choice. This takes you to your application summary view.

Qwiet AI by Harness includes security issues in the total vulnerabilities count [displayed on the application summary](/sast-and-sca/prezero/ui/application-details/summary.md).

To view a complete list of the security issues for the app identified by Qwiet AI by Harness, go to the **Findings** tab. These items are tagged with a **Security Issue** label.

Qwiet AI by Harness allows you to filter security issues based on their severity level, status, the person to whom the issues are assigned for subsequent actions, and more (including its CVSS score, CWE category, OWASP category, and more).

In addition to the **Security Issue** label, Qwiet AI by Harness assigns severity levels to each issue and includes labels indicating the CWE and OWASP categories relevant to that finding. Opening each issue provides in-depth information about the finding, including the source and the sink (the area in your code where the issue can be exploited and becomes a vulnerability).

## Further reading <a href="#further-reading" id="further-reading"></a>

* Learn how to [include security issues in build rules](/sast-and-sca/prezero/customization/build-rules-v2.md).