List vendor external findings

GET

vendors

{vendorId}

external-findings

curl --request GET \
  --url https://api.vanta.com/v1/vendors/{vendorId}/external-findings \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.vanta.com/v1/vendors/{vendorId}/external-findings"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.vanta.com/v1/vendors/{vendorId}/external-findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.vanta.com/v1/vendors/{vendorId}/external-findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vanta.com/v1/vendors/{vendorId}/external-findings"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.vanta.com/v1/vendors/{vendorId}/external-findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "results": {
    "data": [
      {
        "id": "<string>",
        "vendorId": "<string>",
        "title": "<string>",
        "description": "<string>",
        "severity": "CRITICAL",
        "severityReason": "<string>",
        "status": "ACTIVE",
        "category": "<string>",
        "type": "GENERAL",
        "source": "<string>",
        "firstSeenDate": "2023-11-07T05:31:56Z",
        "lastSeenDate": "2023-11-07T05:31:56Z",
        "appearances": 123,
        "remediationGuidance": "<string>",
        "riskContext": "<string>",
        "cveMetadata": {
          "cvssScore": 123,
          "epssScore": "<string>",
          "publishedDate": "2023-11-07T05:31:56Z",
          "nvdUrl": "<string>"
        }
      }
    ],
    "pageInfo": {
      "endCursor": "<string>",
      "hasNextPage": true,
      "hasPreviousPage": true,
      "startCursor": "<string>"
    }
  }
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

vendorId

string

required

Unique identifier of the vendor.

Query Parameters

pageSize

integer<int32>

default:10

Controls the maximum number of items returned in one response from the API.

Required range: 1 <= x <= 100

pageCursor

string

A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.

string

Search finding titles and descriptions.

severityMatchesAny

enum<string>[]

Match any specified severity. Omitted: all except INFO.

Minimum array length: 1

Available options:

CRITICAL,

HIGH,

MEDIUM,

LOW,

INFO

statusMatchesAny

enum<string>[]

Match any specified status. Omitted: both statuses.

Minimum array length: 1

Available options:

ACTIVE,

RESOLVED

categoryMatchesAny

enum<string>[]

Match any specified monitoring category, exactly and case-sensitively. Omitted: all categories.

Minimum array length: 1

Available options:

Application security,

Exposed application user interfaces,

Exposed services,

Exposed & leaked sensitive information,

End of life & outdated applications,

Sensitive interfaces exposure,

Threat intelligence,

Trust,

Vulnerabilities,

Vulnerable misconfigurations

firstSeenStartDate

string

Inclusive ISO 8601 first-seen lower bound. Supply both date bounds with start no later than end.

firstSeenEndDate

string

Inclusive ISO 8601 first-seen upper bound. Supply both date bounds with start no later than end.

sort

enum<string>

default:firstSeenDate

Available options:

firstSeenDate,

severity,

title

direction

enum<string>

default:desc

Ascending means oldest first, highest severity first (CRITICAL to INFO), or title A to Z. Descending reverses each order, matching security incident alerts' severity convention.

Available options:

asc,

desc

Response

200 - application/json

results

object

required

Show child attributes

⌘I

List vendor external findings

curl --request GET \
  --url https://api.vanta.com/v1/vendors/{vendorId}/external-findings \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.vanta.com/v1/vendors/{vendorId}/external-findings"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.vanta.com/v1/vendors/{vendorId}/external-findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.vanta.com/v1/vendors/{vendorId}/external-findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vanta.com/v1/vendors/{vendorId}/external-findings"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.vanta.com/v1/vendors/{vendorId}/external-findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "results": {
    "data": [
      {
        "id": "<string>",
        "vendorId": "<string>",
        "title": "<string>",
        "description": "<string>",
        "severity": "CRITICAL",
        "severityReason": "<string>",
        "status": "ACTIVE",
        "category": "<string>",
        "type": "GENERAL",
        "source": "<string>",
        "firstSeenDate": "2023-11-07T05:31:56Z",
        "lastSeenDate": "2023-11-07T05:31:56Z",
        "appearances": 123,
        "remediationGuidance": "<string>",
        "riskContext": "<string>",
        "cveMetadata": {
          "cvssScore": 123,
          "epssScore": "<string>",
          "publishedDate": "2023-11-07T05:31:56Z",
          "nvdUrl": "<string>"
        }
      }
    ],
    "pageInfo": {
      "endCursor": "<string>",
      "hasNextPage": true,
      "hasPreviousPage": true,
      "startCursor": "<string>"
    }
  }
}

API Basics

Manage API

Integrations API

Audit API

Webhooks

Authorizations

Path Parameters

Query Parameters

Response