Remediation is the execution engine for reducing risk. It takes the findings surfaced elsewhere in Vibgrate and turns them into projects and tasks you can assign, track, and complete — with the risk reduction measured as you go.
What you'll see
- Findings ready to fix — the issues from your scans, grouped so you can act on them.
- Projects and tasks — the work created from those findings, with owners and status.
- Risk-reduction outcomes — how much risk each completed fix removed, so the effort is visible.
- Agents and providers — AI-assisted remediation, including bring-your-own-key AI providers used to draft fixes.
How to use it
Convert a finding into work, assign it, and track it to done. Vibgrate measures the drift and risk before and after, so a completed remediation shows its actual impact rather than just a closed ticket.
How remediation stays safe
Fixes follow the governance lifecycle — inspect, assess, dry-run, approve, execute, verify, and log. Nothing is applied to your code without passing through that flow, and AI providers you connect are used ephemerally, never stored in your code. There's no "quick apply" shortcut around approval, by design.