WaiveWatch · Jira exception lifecycle
Accepted risks should expire. KEV should reopen them.
Force an expiry on risk-accepted findings. Auto-reopen or escalate when a deferred CVE lands in CISA KEV. Jira-native. Not another scanner.
$99/mo for ~20 watched tickets (pilot)
- Custom field: accepted until + CVE ID
- Nightly: expired → comment/transition
- CVE ∈ KEV → reopen + @owner