The trust ladder
Tero organizes issues by risk level. Start at the top and work your way down.Zero risk
You’ll agree immediately: redundant attributes, leftover debug logs, malformed data
Low risk
Straightforward but worth a glance: health checks, bot traffic, unintended tool metadata
Medium risk
Requires discussion with the team: excessive payloads, debug mode left on, sampling decisions
Categories
Logs
Some categories affect attributes (fields within a log). Others affect entire events. Attribute-level — the log stays, specific fields get removed:Redundant attributes
Two fields with the same value
Unintended tool metadata
Fields added by agents you never search
Excessive payloads
Response bodies and large nested objects
Malformed data
Binary blobs, corrupted output
Leftover debug logs
Debug statements that shipped by accident
Debug mode left on
Verbose logging never disabled
Logs in hot path
Log statements in middleware or tight loops
Health checks
Readiness probes, liveness checks
Bot traffic
Crawlers, scrapers, automated scanners
Excessive repetition
High volume where cost outweighs value
PII leakage
Sensitive data that ended up in logs