> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get issue by ID

> Get the details of an issue by its ID.



## OpenAPI

````yaml /reference/manage-vanta.json get /issues/{issueId}
openapi: 3.0.0
info:
  title: Manage Vanta
  version: 1.0.0
  description: >-
    The REST API lets customers query and mutate Vanta's data. Use this API to
    automate bulk actions, query data for custom workflows and dashboards, and
    bolster your security operations


    **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)`
    from the server dropdown to issue requests against
    `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the
    commercial host — replace it with `https://api.vanta-gov.com/oauth/token`.
  termsOfService: https://www.vanta.com/terms
  license:
    name: UNLICENSED
  contact:
    name: API Support
    url: https://help.vanta.com/
    email: support@vanta.com
servers:
  - url: https://api.vanta.com/v1
    description: Vanta (Commercial)
  - url: https://api.vanta-gov.com/v1
    description: Vanta Gov (FedRAMP)
security: []
paths:
  /issues/{issueId}:
    get:
      tags:
        - Issues
      summary: Get issue by ID
      description: Get the details of an issue by its ID.
      operationId: GetIssue
      parameters:
        - in: path
          name: issueId
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Ok
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Issue'
              examples:
                Example 1:
                  value:
                    id: 683e9af1b1234567890abcde
                    readableIssueId: ISS-001
                    createdDate: '2026-01-15T10:00:00.000Z'
                    createdBy:
                      actorType: USER
                      actorId: user-123
                    lastModifiedBy:
                      actorType: USER
                      actorId: user-123
                    lastModifiedDate: '2026-01-20T14:30:00.000Z'
                    title: Access review process needs documentation
                    description: The access review process lacks formal documentation.
                    owners:
                      - ownerType: USER
                        ownerId: user-456
                    severity: MEDIUM
                    status: IN_PROGRESS
                    rootCause: Process was informally defined and not documented.
                    correctiveAction: >-
                      Document the access review process and train relevant
                      staff.
                    dueDate: '2026-03-01T00:00:00.000Z'
                    source:
                      sourceType: SELF_ASSESSMENT
                    controlDomain: Identity and Access Management
                    closedMetadata: null
                    detectedDate: '2026-01-10T00:00:00.000Z'
                    mappedControlIds: []
                    mappedRiskScenarioIds: []
                    mappedPolicyIds: []
                    customFields: []
                    template: STANDARD_ISSUE
                    type: null
      security:
        - bearerAuth: []
components:
  schemas:
    Issue:
      anyOf:
        - $ref: '#/components/schemas/StandardIssue'
        - $ref: '#/components/schemas/StandardPOAM'
    StandardIssue:
      properties:
        id:
          type: string
        readableIssueId:
          type: string
        createdDate:
          type: string
          format: date-time
        createdBy:
          $ref: '#/components/schemas/Actor'
        lastModifiedBy:
          $ref: '#/components/schemas/Actor'
        lastModifiedDate:
          type: string
          format: date-time
        title:
          type: string
        description:
          type: string
        owners:
          items:
            $ref: '#/components/schemas/IssueOwner'
          type: array
        severity:
          $ref: '#/components/schemas/IssueSeverity'
        status:
          $ref: '#/components/schemas/IssueStatus'
        rootCause:
          type: string
          nullable: true
        correctiveAction:
          type: string
          nullable: true
        dueDate:
          type: string
          format: date-time
          nullable: true
        source:
          allOf:
            - $ref: '#/components/schemas/Source'
          nullable: true
        controlDomain:
          type: string
          nullable: true
        closedMetadata:
          allOf:
            - $ref: '#/components/schemas/ClosedMetadata'
          nullable: true
        detectedDate:
          type: string
          format: date-time
        mappedControlIds:
          items:
            type: string
          type: array
        mappedRiskScenarioIds:
          items:
            type: string
          type: array
        mappedPolicyIds:
          items:
            type: string
          type: array
        customFields:
          items:
            $ref: '#/components/schemas/IssueCustomField'
          type: array
        template:
          $ref: '#/components/schemas/Extract_IssueTemplate.STANDARD_ISSUE_'
        type:
          allOf:
            - $ref: '#/components/schemas/StandardIssueType'
          nullable: true
      required:
        - id
        - readableIssueId
        - createdDate
        - createdBy
        - lastModifiedBy
        - lastModifiedDate
        - title
        - description
        - owners
        - severity
        - status
        - rootCause
        - correctiveAction
        - dueDate
        - source
        - controlDomain
        - closedMetadata
        - detectedDate
        - mappedControlIds
        - mappedRiskScenarioIds
        - mappedPolicyIds
        - customFields
        - template
        - type
      type: object
      additionalProperties: false
    StandardPOAM:
      properties:
        id:
          type: string
        readableIssueId:
          type: string
        createdDate:
          type: string
          format: date-time
        createdBy:
          $ref: '#/components/schemas/Actor'
        lastModifiedBy:
          $ref: '#/components/schemas/Actor'
        lastModifiedDate:
          type: string
          format: date-time
        title:
          type: string
        description:
          type: string
        owners:
          items:
            $ref: '#/components/schemas/IssueOwner'
          type: array
        severity:
          $ref: '#/components/schemas/IssueSeverity'
        status:
          $ref: '#/components/schemas/IssueStatus'
        rootCause:
          type: string
          nullable: true
        correctiveAction:
          type: string
          nullable: true
        dueDate:
          type: string
          format: date-time
          nullable: true
        source:
          allOf:
            - $ref: '#/components/schemas/Source'
          nullable: true
        controlDomain:
          type: string
          nullable: true
        closedMetadata:
          allOf:
            - $ref: '#/components/schemas/ClosedMetadata'
          nullable: true
        detectedDate:
          type: string
          format: date-time
        mappedControlIds:
          items:
            type: string
          type: array
        mappedRiskScenarioIds:
          items:
            type: string
          type: array
        mappedPolicyIds:
          items:
            type: string
          type: array
        customFields:
          items:
            $ref: '#/components/schemas/IssueCustomField'
          type: array
        template:
          $ref: '#/components/schemas/Extract_IssueTemplate.STANDARD_POAM_'
        requiredResources:
          type: string
          nullable: true
        systemsDescription:
          type: string
          nullable: true
      required:
        - id
        - readableIssueId
        - createdDate
        - createdBy
        - lastModifiedBy
        - lastModifiedDate
        - title
        - description
        - owners
        - severity
        - status
        - rootCause
        - correctiveAction
        - dueDate
        - source
        - controlDomain
        - closedMetadata
        - detectedDate
        - mappedControlIds
        - mappedRiskScenarioIds
        - mappedPolicyIds
        - customFields
        - template
        - requiredResources
        - systemsDescription
      type: object
      additionalProperties: false
    Actor:
      properties:
        actorType:
          $ref: '#/components/schemas/ActorType'
        actorId:
          type: string
      required:
        - actorType
        - actorId
      type: object
      additionalProperties: false
    IssueOwner:
      properties:
        ownerType:
          $ref: '#/components/schemas/OwnerType'
        ownerId:
          type: string
      required:
        - ownerType
        - ownerId
      type: object
      additionalProperties: false
    IssueSeverity:
      type: string
      enum:
        - CRITICAL
        - HIGH
        - MEDIUM
        - LOW
        - NO_SEVERITY
    IssueStatus:
      type: string
      enum:
        - NOT_STARTED
        - IN_PROGRESS
        - CLOSED
    Source:
      properties:
        sourceType:
          $ref: '#/components/schemas/SourceType'
        sourceId:
          type: string
      required:
        - sourceType
      type: object
      additionalProperties: false
    ClosedMetadata:
      properties:
        reason:
          $ref: '#/components/schemas/ClosedReason'
        comment:
          type: string
        closedAt:
          type: string
          format: date-time
      required:
        - reason
        - comment
        - closedAt
      type: object
      additionalProperties: false
    IssueCustomField:
      properties:
        label:
          type: string
        value:
          anyOf:
            - type: string
            - items:
                type: string
              type: array
      required:
        - label
        - value
      type: object
      additionalProperties: false
    Extract_IssueTemplate.STANDARD_ISSUE_:
      type: string
      enum:
        - STANDARD_ISSUE
      nullable: false
      description: Extract from T those types that are assignable to U
    StandardIssueType:
      type: string
      enum:
        - AREA_OF_CONCERN
        - MAJOR_NONCONFORMITY
        - MINOR_NONCONFORMITY
        - OPP_FOR_IMPROVEMENT
        - EXCEPTION
        - PROCESS_FOR_IMPROVEMENT
    Extract_IssueTemplate.STANDARD_POAM_:
      type: string
      enum:
        - STANDARD_POAM
      nullable: false
      description: Extract from T those types that are assignable to U
    ActorType:
      type: string
      enum:
        - USER
        - WORKFLOW_GENERATED
    OwnerType:
      type: string
      enum:
        - USER
        - TEAM
    SourceType:
      type: string
      enum:
        - AUDIT
        - AUDIT_EXTERNAL
        - INCIDENT
        - EXTERNAL_PARTY
        - SELF_ASSESSMENT
        - OTHER
    ClosedReason:
      type: string
      enum:
        - RESOLVED
        - DUPLICATE
        - ACCEPTED
        - OTHER
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````