---
title: "Submit Report"
method: POST
path: "/v1/reports"
tags: ["reports"]
---

# Submit Report

`POST /v1/reports`

## Request

- Base URL: `https://api.cybret.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.cybret.ai/v1/reports`
- Auth: HTTP bearer

## Query parameters

- `regenerate` boolean

## Headers

- `Idempotency-Key` string, nullable

## Request body

- EngagementReportDocument: POST /v1/reports body. extra=forbid; empty findings stay empty.
  - `kind` 'pentest' | 'retest' | 'attestation', required
  - `engagement_id` string, nullable
  - `customer` EngagementParty, required
    - `name` string, required
    - `legal_name` string, nullable
    - `contact_name` string, nullable
    - `contact_email` string, nullable
  - `prepared_by` EngagementParty
    - `name` string, required
    - `legal_name` string, nullable
    - `contact_name` string, nullable
    - `contact_email` string, nullable
  - `period` EngagementPeriod, required
    - `started_on` string, date, required
    - `ended_on` string, date, required
    - `retested_on` string, date, nullable
  - `scope` ScopeHost[], required
    - `host` string, required
    - `environment` string, nullable
    - `application` string, nullable
  - `exclusions` string[]
  - `findings` PublishedFinding[]
    - `title` string, required
    - `severity` 'critical' | 'high' | 'medium' | 'low', required: Exploitable published severities. Info/scanner-noise is out of band.
    - `status` 'open' | 'fixed' | 'accepted_risk'
    - `previous_status` 'open' | 'fixed' | 'accepted_risk'
    - `hosts` string[]
    - `description` string, required
    - `impact` string, nullable
    - `remediation` string, nullable
    - `cvss_score` number, nullable
    - `cvss_vector` string, nullable
    - `cwe_ids` string[]
    - `evidence` CustomerSafeEvidence[]
      - `summary` string, required
  - `executive_summary` string, nullable
  - `methodology_notes` string, nullable
  - `attestation` AttestationBlock
    - `signer_name` string, required
    - `signer_role` string, required
    - `signed_on` string, date, nullable
    - `statement` string, nullable
  - `previous_engagement_id` string, nullable
  - `classification` string

## Response `202`

Successful Response

- ReportAccepted
  - `id` string, required
  - `engagement_id` string, required
  - `kind` 'pentest' | 'retest' | 'attestation', required
  - `status` 'queued' | 'running' | 'succeeded' | 'failed', required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/cybret/apis/api-scanner-control-plane.md) · [All operations](https://skmtc.dev/cybret/apis/api-scanner-control-plane/llms.txt) · [OpenAPI document](https://skmtc.dev/cybret/apis/api-scanner-control-plane/revisions/4c9b522246af?raw)