Findings and risk
False positive
Also called: false finding
A false positive is a reported finding that is not actually exploitable or not actually present. Validating findings before they reach the report is one of the main differences between a penetration test and a raw scan output.