---
title: "Get attack analysis"
method: GET
path: "/pentests/issues/{issue_id}/attackAnalysis"
---

# Get attack analysis

`GET /pentests/issues/{issue_id}/attackAnalysis`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/pentests/issues/{issue_id}/attackAnalysis`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `pentests:read`

Get attack analysis for a specific pentest issue

## Path parameters

- `issue_id` integer, required

## Response `200`

Attack analysis

- object
  - `title` string: The title of the pentest issue
  - `summary` string: A short summary of the attack analysis
  - `description` string: A detailed description of the attack analysis
  - `risk` string: The risk of the attack analysis
  - `reproduction_steps` object[]: The reproduction steps of the attack analysis
    - `code_block` string: The optional code block related to the reproduction step
    - `observed_result` string: The observed result of the reproduction step
    - `step_info` string: The reproduction step description
  - `remediation` unknown[]: The remediation of the attack analysis
    - unknown
  - `root_cause_analysis` string: The root cause analysis of the attack analysis
  - `retests` object[]: Retests of this finding, oldest first. The result is null while a retest is still running.
    - `id` string: The unique ID of the retest
    - `created_at` string, date-time: When the retest was created
    - `status` 'draft' | 'pending' | 'running' | 'paused' | 'failed' | 'completed' | 'cancelled': The retest status
    - `status_details` string, nullable: Additional status detail, when present
    - `result` object, nullable: The retest result. Null while the retest has not finished.
      - `solved` boolean: Whether the retest confirmed the finding is fixed
      - `summary` string: A short summary of the retest result
      - `description` string: A detailed description of the retest result
      - `reproduction_steps` object[]: The reproduction steps from the retest
        - `code_block` string, nullable: The optional code block related to the reproduction step
        - `observed_result` string, nullable: The observed result of the reproduction step
        - `step_info` string, nullable: The reproduction step description
      - `remediation` string[]: Updated remediation from the retest

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)