---
title: "Get scan status"
method: GET
path: "/v3/threat-hunting/scans/{scan_id}"
tags: ["Threat Hunting"]
---

# Get scan status

`GET /v3/threat-hunting/scans/{scan_id}`

## Request

- Base URL: `https://api.platform.censys.io`
- URL: `https://api.platform.censys.io/v3/threat-hunting/scans/{scan_id}`
- Auth: HTTP bearer

Retrieve the current status of a scan by its ID. This endpoint works for both [Live Discovery scans](https://docs.censys.com/reference/v3-threathunting-scans-discovery#/) and [Live Rescans](https://docs.censys.com/reference/v3-globaldata-scans-rescan#/).<br><br>Use this endpoint to check whether a Live Discovery or Live Rescan scan has finished, so automation knows when fresh data is ready to pull.<br><br>If the scan was successful, perform a lookup on the target asset to retrieve detailed scan information.<br><br>This endpoint is available to all enterprise customers. This endpoint does not cost any credits to execute.

## Path parameters

- `scan_id` string, uuid, required: The unique identifier of the tracked scan

## Query parameters

- `organization_id` string, uuid, required: The ID of a Censys organization to associate the request with. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information.

## Headers

- `X-Organization-ID` string, uuid: The ID of a Censys organization to associate the request with. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

## Response `200`

OK

- ResponseEnvelopeTrackedScan
  - `result` TrackedScan
    - `completed` boolean
    - `create_time` string
    - `target` TrackedScanScanTarget
      - `host_port` TrackedScanScanTargetHostPort
        - `ip` string
        - `port` integer
      - `hostname_port` TrackedScanScanTargetHostnamePort
        - `hostname` string
        - `port` integer
      - `service_id` ServiceId
        - `ip` string
        - `port` integer
        - `protocol` string
        - `transport_protocol` '' | 'tcp' | 'udp' | 'icmp' | 'quic'
      - `web_origin` WebOrigin
        - `hostname` string
        - `port` integer
    - `tasks` TrackedScanTask[], nullable
      - `description` string
      - `status` '' | 'scanning' | 'scanned' | 'rejected' | 'timed_out' | 'completed' | 'ignored'
      - `update_time` string
    - `tracked_scan_id` string

## Other responses

- `400`: Bad request
- `401`: Request does not contain a valid Authorization token
- `403`: User does not have permission to access this data
- `404`: No scan found
- `500`: Internal server error

---

[API](https://skmtc.dev/censys/apis/censys-platform-api.md) - [All operations](https://skmtc.dev/censys/apis/censys-platform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/censys/apis/censys-platform-api/revisions/ec1686b0a36a?raw)