---
title: "List the ransomware findings for a company."
method: GET
path: "/api/v2/companies/{id}/findings/ransomware"
tags: ["Findings"]
---

# List the ransomware findings for a company.

`GET /api/v2/companies/{id}/findings/ransomware`

## Request

- Base URL: `https://app.blackkitetech.com`
- URL: `https://app.blackkitetech.com/api/v2/companies/{id}/findings/ransomware`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.blackkitetech.com//api/v2/oauth/token`
- TypeScript: <https://skmtc.dev/blackkitetech/apis/black-kite-api/docs/api/v2/companies/:id/findings/ransomware/get.ts> (a function with typed inputs; its response is checked against the schema)

List the ransomware findings for a company. These findings might include Network Security, Patch Management, Credential Mgmt., Fraudulent Domains, IP Reputation, Information Disclosure, Hacktivist Shares, Email Security module findings.<br/><br/> For storage optimization, the system <b>permanently</b> deletes all findings that haven't been detected by the Black Kite scanner for over a year. Findings with manually changed statuses or associated tickets are excluded.

## Path parameters

- `id` integer, required

## Query parameters

- `page_number` integer
- `page_size` 10 | 20 | 30 | 50 | 100 | 250 | 500 | 1000 | 5000

## Response `200`

Success

- RansomwareFinding[]
  - `FindingId` integer: The unique identifier of this finding.
  - `Module` string: The module of this finding. The possible responses are listed below. - Network Security - Patch Management - Credential Mgmt. - Fraudulent Domains - IP Reputation - Information Disclosure - Hacktivist Shares - Email Security
  - `Url` string: The URL to get details of the finding. - For Network Security module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/networksecurity/{findingId} - For Patch Management module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/patchmanagement/{findingId} - For Credential Mgmt. module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/credentialmanagement/{findingId} - For Fraudulent Domains module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/fraudulentdomains/{findingId} - For IP Reputation module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/ipreputation/{findingId} - For Information Disclosure module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/informationdisclosure/{findingId} - For Hacktivist Shares module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/hacktivistshares/{findingId} - For Email Security module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/emailsecurity/{findingId}

## Other responses

- `400`: BadRequest
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `default`: Failure

---

[API](https://skmtc.dev/blackkitetech/apis/black-kite-api.md) - [All operations](https://skmtc.dev/blackkitetech/apis/black-kite-api/llms.txt) - [OpenAPI document](https://skmtc.dev/blackkitetech/apis/black-kite-api/revisions/fc42796447f4?raw)