List vendor alerts

GET

vendor-alerts

List vendor alerts

curl --request GET \
  --url https://api.vanta.com/v1/vendor-alerts \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.vanta.com/v1/vendor-alerts', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.vanta.com/v1/vendor-alerts",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vanta.com/v1/vendor-alerts"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.vanta.com/v1/vendor-alerts")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "results": {
    "data": [
      {
        "id": "68f620000000000000000001",
        "vendorId": "68f620000000000000000002",
        "title": "Exposed service detected",
        "description": "A service is publicly accessible.",
        "severity": "HIGH",
        "status": "OPEN",
        "category": "Exposed services",
        "type": "GENERAL",
        "source": "external attack surface scanning",
        "creationDate": "2026-10-20T12:00:00.000Z",
        "updatedDate": "2026-10-20T12:00:00.000Z"
      }
    ],
    "pageInfo": {
      "startCursor": null,
      "endCursor": null,
      "hasNextPage": false,
      "hasPreviousPage": false
    }
  }
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Query Parameters

pageSize

integer<int32>

default:10

Controls the maximum number of items returned in one response from the API.

Required range: 1 <= x <= 100

pageCursor

string

A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.

string

Search alert titles and vendor names.

statusMatchesAny

enum<string>[]

Filter to alerts matching any of the provided statuses.

Available options:

OPEN,

ESCALATED,

RESOLVED,

NOT_RELEVANT,

AUTO_RESOLVED

severityMatchesAny

enum<string>[]

Filter to alerts matching any of the provided severities.

Available options:

CRITICAL,

HIGH,

MEDIUM,

LOW

categoryMatchesAny

string[]

Filter to alerts matching any of the provided security categories.

typeMatchesAny

enum<string>[]

Filter to alerts matching any of the provided types.

Available options:

GENERAL,

CVE,

LEAKED_CREDENTIALS

vendorRiskLevelMatchesAny

enum<string>[]

Filter to alerts whose vendors match any of the provided inherent risk levels.

Available options:

CRITICAL,

HIGH,

MEDIUM,

LOW,

UNSCORED

orderBy

enum<string>

default:severity

Field to sort results by. Defaults to severity.

Available options:

severity,

status,

creationDate

orderDirection

enum<string>

default:desc

Direction to sort results in. Defaults to descending.

Available options:

asc,

desc

Response

200 - application/json

results

object

required

Show child attributes

⌘I

List vendor alerts

curl --request GET \
  --url https://api.vanta.com/v1/vendor-alerts \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.vanta.com/v1/vendor-alerts', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.vanta.com/v1/vendor-alerts",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vanta.com/v1/vendor-alerts"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.vanta.com/v1/vendor-alerts")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "results": {
    "data": [
      {
        "id": "68f620000000000000000001",
        "vendorId": "68f620000000000000000002",
        "title": "Exposed service detected",
        "description": "A service is publicly accessible.",
        "severity": "HIGH",
        "status": "OPEN",
        "category": "Exposed services",
        "type": "GENERAL",
        "source": "external attack surface scanning",
        "creationDate": "2026-10-20T12:00:00.000Z",
        "updatedDate": "2026-10-20T12:00:00.000Z"
      }
    ],
    "pageInfo": {
      "startCursor": null,
      "endCursor": null,
      "hasNextPage": false,
      "hasPreviousPage": false
    }
  }
}

API Basics

Manage API

Integrations API

Audit API

Webhooks

Authorizations

Query Parameters

Response