Analysis Finding Severity Reclassifier

WHAT IT DOES

The Analysis Finding Severity Reclassifier is a security tool that reclassifies the severity of findings from static analysis tools based on user-defined rules. It takes JSON-formatted findings with existing severity labels, applies custom mapping rules (e.g., High → Critical, Low → Info), and generates reclassified findings. This helps security teams align scanner outputs with their organization's severity taxonomy, prioritize findings according to internal policies, and standardize severity classifications across multiple tools.

HOW TO USE

Enter your findings as a JSON array in the first text area. Each finding should have a severity field (or impact field). Enter reclassification rules in the second text area with format "original=reclassified" (one per line). Click "reclassify findings" to apply the rules. The tool processes each finding, applies the mapping rules, and displays the reclassified findings with original and new severity labels. Results include a summary of changed and unchanged findings, a table of applied rules, and a detailed view of each reclassified finding. Download the reclassified findings as JSON for integration with other tools.

TECHNICAL MECHANISM

The tool parses the findings JSON array and validates its structure. It extracts severity labels from each finding by checking common field names (severity, impact) and normalizes them for comparison. The user-defined rules are parsed from a key-value format where the original severity maps to a new severity. The reclassification engine iterates through each finding, checks if the original severity matches any rule, and applies the reclassification while preserving the original severity in an "originalSeverity" field. The tool tracks statistics on how many findings were changed and how many remained unchanged. Results are displayed in a table with color-coded severity tags and downloadable as JSON.

WHAT IT CANNOT SEE

The tool cannot automatically determine the appropriate severity for a finding without user-defined rules. It cannot detect context-specific severity variations that depend on contract logic. The tool cannot verify if the reclassification is correct without manual review. It cannot account for tool-specific severity schemas that use different labels. The tool cannot handle findings that don't match any defined rule. It cannot validate that the reclassification improves security decision-making. The tool cannot detect if a finding should be escalated or de-escalated based on external factors.

PLEASE NOTE

This tool is designed for Ethereum Virtual Machine (EVM) compatible chains. The reclassification rules are applied exactly as defined—the tool does not perform semantic analysis. Users should review reclassified findings to ensure accuracy. The tool provides a starting point for severity alignment but does not replace manual security review. The downloaded JSON includes both the original and reclassified severity for audit purposes. The tool is intended for security professionals standardizing findings across multiple tools.