# Security hotspots reviewed calculation

**URL:** <https://community.sonarsource.com/t/security-hotspots-reviewed-calculation/79482>\
**Category:** SonarQube Server / Community Build\
**Tags:** sonarqube, scanner, java\
**Created:** [December 29, 2022, 6:49am UTC](https://community.sonarsource.com/t/security-hotspots-reviewed-calculation/79482 "2022-12-29T06:49:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mehmet\_Inan](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/mehmet_inan/32/30284_2.png) [@Mehmet\_Inan](https://community.sonarsource.com/u/Mehmet_Inan)\
**Post date:** [December 29, 2022, 6:49am UTC](https://community.sonarsource.com/t/security-hotspots-reviewed-calculation/79482/1 "2022-12-29T06:49:24Z")

</div>

Hello Sonarqube family,

- which versions are you using . SONARQUBE ENTERPRİSE EDITION 8.9.10  
I would like to understand how security review has been E. As you see in below screenshot it looks E.  
 ![image](https://europe1.discourse-cdn.com/sonarsource/uploads/sonarcommunity/original/3X/9/a/9a4ebae57e6e5667e902b5aa56e6a1ffe0253d98.png)

And you can see below screnshot with details.

 ![image](https://europe1.discourse-cdn.com/sonarsource/uploads/sonarcommunity/original/3X/b/b/bbd457fb3bbd6af023b7321eec927721f48d4480.png)  
**I know if the Security Hotspots Reviewed**  
A-\>= %80,  
B- \>=%70 ve \<%80  
C- \>=%50 ve \<%70  
D- \>=%30 ve \<%50  
E- \<%30A-\>= %80  
I know **Security hotspots reviewed** (`security_hotspots_reviewed` ): The percentage of reviewed security hotspots. Ratio formula: `Number of Reviewed Hotspots x 100 / (To_Review Hotspots + Reviewed Hotspots)`

But Could you please explain me how it became E (meaning security hotspots revied \<%30) ? Also how review looks as 0.0%?

Thanks,  
Kind regards,

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [December 30, 2022, 8:17am UTC](https://community.sonarsource.com/t/security-hotspots-reviewed-calculation/79482/2 "2022-12-30T08:17:02Z")

</div>

Hey there.

It’s an E because E = \< 30%, and you have reviewed 0 security hotspots (so 0%). You can learn more about the [security hotspots workflow here](https://docs.sonarqube.org/8.9/user-guide/security-hotspots/)