> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get vendor alert

> Retrieves a specific vendor alert by ID, such as a CVE, leaked credentials,
or an exposed asset. Doesn't return security incident alerts. Returns a 404
error if the alert isn't found in your organization.

Requires vendor read access and continuous monitoring enabled for your
organization.



## OpenAPI

````yaml /reference/manage-vanta.json get /vendor-alerts/{alertId}
openapi: 3.0.0
info:
  title: Manage Vanta
  version: 1.0.0
  description: >-
    The REST API lets customers query and mutate Vanta's data. Use this API to
    automate bulk actions, query data for custom workflows and dashboards, and
    bolster your security operations


    **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)`
    from the server dropdown to issue requests against
    `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the
    commercial host — replace it with `https://api.vanta-gov.com/oauth/token`.
  termsOfService: https://www.vanta.com/terms
  license:
    name: UNLICENSED
  contact:
    name: API Support
    url: https://help.vanta.com/
    email: support@vanta.com
servers:
  - url: https://api.vanta.com/v1
    description: Vanta (Commercial)
  - url: https://api.vanta-gov.com/v1
    description: Vanta Gov (FedRAMP)
security: []
paths:
  /vendor-alerts/{alertId}:
    get:
      tags:
        - Vendor Alerts
      summary: Get vendor alert
      description: >-
        Retrieves a specific vendor alert by ID, such as a CVE, leaked
        credentials,

        or an exposed asset. Doesn't return security incident alerts. Returns a
        404

        error if the alert isn't found in your organization.


        Requires vendor read access and continuous monitoring enabled for your

        organization.
      operationId: GetVendorAlert
      parameters:
        - description: Unique identifier of the vendor alert to retrieve.
          in: path
          name: alertId
          required: true
          schema:
            type: string
          example: 68f620000000000000000001
      responses:
        '200':
          description: Ok
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorAlert'
              examples:
                Example 1:
                  value:
                    id: 68f620000000000000000001
                    vendorId: 68f620000000000000000002
                    title: Exposed service detected
                    description: A service is publicly accessible.
                    severity: HIGH
                    status: OPEN
                    category: Exposed services
                    type: GENERAL
                    source: external attack surface scanning
                    creationDate: '2026-10-20T12:00:00.000Z'
                    updatedDate: '2026-10-20T12:00:00.000Z'
      security:
        - bearerAuth: []
components:
  schemas:
    VendorAlert:
      properties:
        id:
          type: string
          description: Unique identifier of the vendor alert.
        vendorId:
          type: string
          description: Unique identifier of the vendor associated with the alert.
        title:
          type: string
          description: Title of the monitoring finding that triggered the alert.
        description:
          type: string
          description: Details of the monitoring finding that triggered the alert.
        severity:
          $ref: '#/components/schemas/VendorAlertSeverity'
          description: Severity of the monitoring finding.
        status:
          $ref: '#/components/schemas/VendorAlertStatus'
          description: |-
            Current alert status. AUTO_RESOLVED indicates automatic resolution;
            NOT_RELEVANT indicates the alert was marked as not relevant.
        category:
          type: string
          description: Security category, such as Vulnerabilities or Application security.
        type:
          $ref: '#/components/schemas/VendorAlertType'
          description: 'Type of monitoring finding: general, CVE, or leaked credentials.'
        source:
          type: string
          nullable: true
          description: Source of the monitoring finding, or null when unavailable.
        creationDate:
          type: string
          format: date-time
          description: Date and time the alert was created, in ISO 8601 format.
        updatedDate:
          type: string
          format: date-time
          description: Date and time the alert was last updated, in ISO 8601 format.
      required:
        - id
        - vendorId
        - title
        - description
        - severity
        - status
        - category
        - type
        - source
        - creationDate
        - updatedDate
      type: object
      additionalProperties: false
    VendorAlertSeverity:
      type: string
      enum:
        - CRITICAL
        - HIGH
        - MEDIUM
        - LOW
    VendorAlertStatus:
      type: string
      enum:
        - OPEN
        - ESCALATED
        - RESOLVED
        - NOT_RELEVANT
        - AUTO_RESOLVED
    VendorAlertType:
      type: string
      enum:
        - GENERAL
        - CVE
        - LEAKED_CREDENTIALS
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````

## Related topics

- [Get vendor alert settings](https://developer.vanta.com/api-reference/vendor-alert-settings/get-vendor-alert-settings.md)
- [List vendor alerts](https://developer.vanta.com/api-reference/vendor-alerts/list-vendor-alerts.md)
- [Update vendor alerts](https://developer.vanta.com/api-reference/vendor-alerts/update-vendor-alerts.md)
- [Get vendor security incident alert by ID](https://developer.vanta.com/api-reference/vendor-security-incident-alerts/get-vendor-security-incident-alert-by-id.md)
- [Update vendor alert settings](https://developer.vanta.com/api-reference/vendor-alert-settings/update-vendor-alert-settings.md)