A false positive occurs when legitimate software or files are mistakenly flagged as malicious and quarantined, or when our software incorrectly blocks a website. If you suspect that you are experiencing a false positive, inform our support and research teams so they investigate and validate it. If they determine it is safe, they will remove the block.
Submit a ticket from the cloud console
For customers, submit a support ticket with I need to report a false positive via the cloud console to expedite your ticket. Include the endpoint name(s) and the file path or website being blocked in the ticket.
Create a post on the forums
If you are not a ThreatDown customer, create a post on our forums.
- Sign up or Log in to the Forums.
- Go to the False Positives page.
- Select the type of false positive.
- Create a post with details about the issue.
- A Staff member will reply to your forum post.