← Security+ glossary

False positive / false negative

A false positive is when a scanner reports a vulnerability that does not actually exist, while a false negative is when a scanner misses and fails to report a real vulnerability. A false negative is more dangerous because it creates a false sense of security while the real vulnerability remains undetected and unpatched.

All Security+ guides →