---
title: "Get scan statistics"
method: GET
path: "/scans/{scanId}/statistics"
tags: ["Scans"]
---

# Get scan statistics

`GET /scans/{scanId}/statistics`

## Request

- Base URL: `https://public.escape.tech/v3`
- URL: `https://public.escape.tech/v3/scans/{scanId}/statistics`
- Auth: API key in header `X-ESCAPE-API-KEY`

Returns aggregated statistics for a scan: issue counts by severity and category, compliance coverage, API coverage statuses, scanner events over time, and request counts by operation.

## Path parameters

- `scanId` string, required: The scan ID

## Response `200`

OK

- object
  - `scanId` string, uuid, required: The id of the scan
  - `issue` object, required: Statistics about the issues of the scan
    - `severities` object[], required: Issue counts grouped by severity
      - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM', required: The severity of the issues
      - `count` integer, required: The number of issues with this severity in the scan
    - `categories` object[], required: Issue counts grouped by category
      - `category` 'ACCESS_CONTROL' | 'CONFIGURATION' | 'CUSTOM' | 'INFORMATION_DISCLOSURE' | 'INJECTION' | 'PROTOCOL' | 'REQUEST_FORGERY' | 'RESOURCE_LIMITATION' | 'SCHEMA' | 'SENSITIVE_DATA', required: The category of the issues
      - `count` integer, nullable, required: The number of issues in this category, when available
      - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM' | 'null', nullable, required: The highest severity seen in this category, when available
    - `compliance` object[], required: Compliance framework coverage of the scan issues
      - `compliance` 'BITSIGHT' | 'CRA' | 'CWE' | 'DORA' | 'FEDRAMP' | 'GDPR' | 'HIPAA' | 'HITRUST_CSF' | 'IEC62443' | 'ISO27001' | 'MITRE_ATTACK' | 'NIS2' | 'NIST' | 'OWASP' | 'OWASP_ASVS' | 'OWASP_LLM' | 'PCI_DSS' | 'PSD2' | 'SECURITY_SCORECARD' | 'SOC2' | 'WASC', required: The compliance framework the items belong to
      - `enabled` boolean, required: Whether the compliance framework is enabled for the scan organization
      - `failedItems` string[], required: Compliance items with at least one issue in the scan
    - `coverage` string[], required: Distinct API coverage statuses recorded for the scanned specification operations
  - `events` object, required: Statistics about the scanner events of the scan
    - `eventsOverTime` object[], required: Scanner event counts over time
      - `date` string, required: The ISO 8601 start of the time bucket
      - `count` integer, required: The number of scanner events in the bucket
  - `requestTypeCounts` object[], required: Request counts grouped by HTTP method or GraphQL operation
    - `operation` string, required: The HTTP method or GraphQL operation
    - `count` integer, required: The number of requests observed for the operation

## Other responses

- `404`: Not found

---

[API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)