> ## Documentation Index > Fetch the complete documentation index at: https://developer.vanta.com/llms.txt > Use this file to discover all available pages before exploring further. # Update vendor alerts > Applies one status to 1-100 vendor alerts. Duplicate IDs are ignored; each alert is returned once, in its first-occurrence order in `alertIds`. If any alert isn't found in your organization, the entire request fails without changes. Requires continuous monitoring. ## OpenAPI ````yaml /reference/manage-vanta.json patch /vendor-alerts openapi: 3.0.0 info: title: Manage Vanta version: 1.0.0 description: >- The REST API lets customers query and mutate Vanta's data. Use this API to automate bulk actions, query data for custom workflows and dashboards, and bolster your security operations **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)` from the server dropdown to issue requests against `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the commercial host — replace it with `https://api.vanta-gov.com/oauth/token`. termsOfService: https://www.vanta.com/terms license: name: UNLICENSED contact: name: API Support url: https://help.vanta.com/ email: support@vanta.com servers: - url: https://api.vanta.com/v1 description: Vanta (Commercial) - url: https://api.vanta-gov.com/v1 description: Vanta Gov (FedRAMP) security: [] paths: /vendor-alerts: patch: tags: - Vendor Alerts summary: Update vendor alerts description: >- Applies one status to 1-100 vendor alerts. Duplicate IDs are ignored; each alert is returned once, in its first-occurrence order in `alertIds`. If any alert isn't found in your organization, the entire request fails without changes. Requires continuous monitoring. operationId: UpdateVendorAlerts parameters: [] requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/UpdateVendorAlertsInput' responses: '200': description: Ok content: application/json: schema: $ref: '#/components/schemas/UpdateVendorAlertsResponse' examples: Example 1: value: results: - id: 68f620000000000000000001 vendorId: 68f620000000000000000002 title: Exposed service detected description: A service is publicly accessible. severity: HIGH status: OPEN category: Exposed services type: GENERAL source: external attack surface scanning creationDate: '2026-10-20T12:00:00.000Z' updatedDate: '2026-10-20T12:00:00.000Z' security: - bearerAuth: [] components: schemas: UpdateVendorAlertsInput: properties: alertIds: items: type: string type: array description: >- IDs of the vendor alerts to update. Each alert must belong to your organization. Repeated IDs are ignored; the supplied status applies to every unique ID. minItems: 1 maxItems: 100 status: type: string enum: - OPEN - ESCALATED - RESOLVED - NOT_RELEVANT description: >- Target status for every supplied alert. AUTO_RESOLVED is system-controlled. required: - alertIds - status type: object additionalProperties: false UpdateVendorAlertsResponse: properties: results: items: $ref: '#/components/schemas/VendorAlert' type: array description: Updated alerts, once per ID, in first-occurrence request order. required: - results type: object additionalProperties: false VendorAlert: properties: id: type: string description: Unique identifier of the vendor alert. vendorId: type: string description: Unique identifier of the vendor associated with the alert. title: type: string description: Title of the monitoring finding that triggered the alert. description: type: string description: Details of the monitoring finding that triggered the alert. severity: $ref: '#/components/schemas/VendorAlertSeverity' description: Severity of the monitoring finding. status: $ref: '#/components/schemas/VendorAlertStatus' description: |- Current alert status. AUTO_RESOLVED indicates automatic resolution; NOT_RELEVANT indicates the alert was marked as not relevant. category: type: string description: Security category, such as Vulnerabilities or Application security. type: $ref: '#/components/schemas/VendorAlertType' description: 'Type of monitoring finding: general, CVE, or leaked credentials.' source: type: string nullable: true description: Source of the monitoring finding, or null when unavailable. creationDate: type: string format: date-time description: Date and time the alert was created, in ISO 8601 format. updatedDate: type: string format: date-time description: Date and time the alert was last updated, in ISO 8601 format. required: - id - vendorId - title - description - severity - status - category - type - source - creationDate - updatedDate type: object additionalProperties: false VendorAlertSeverity: type: string enum: - CRITICAL - HIGH - MEDIUM - LOW VendorAlertStatus: type: string enum: - OPEN - ESCALATED - RESOLVED - NOT_RELEVANT - AUTO_RESOLVED VendorAlertType: type: string enum: - GENERAL - CVE - LEAKED_CREDENTIALS securitySchemes: bearerAuth: type: http scheme: bearer ```` ## Related topics - [Update vendor alert settings](https://developer.vanta.com/api-reference/vendor-alert-settings/update-vendor-alert-settings.md) - [Update vendor security incident alerts](https://developer.vanta.com/api-reference/vendor-security-incident-alerts/update-vendor-security-incident-alerts.md) - [Get vendor alert](https://developer.vanta.com/api-reference/vendor-alerts/get-vendor-alert.md) - [List vendor alerts](https://developer.vanta.com/api-reference/vendor-alerts/list-vendor-alerts.md) - [Get vendor alert settings](https://developer.vanta.com/api-reference/vendor-alert-settings/get-vendor-alert-settings.md)