Overview

We are seeing a high number of false positives due to the server returning a generic error page for invalid paths. These error pages differed significantly in size from the homepage and didn’t include redirect responses, which meant that our False Positive detection methods didn't pick them up

To address this, we now test a random path and use its response as a baseline to identify and filter out false positives. This approach should significantly reduce the noise in our results.