---
title: "Get a security test"
method: GET
path: "/security-tests/{securityTestUid}"
tags: ["SecurityTests"]
---

# Get a security test

`GET /security-tests/{securityTestUid}`

## Request

- Base URL: `https://public.escape.tech/v3`
- URL: `https://public.escape.tech/v3/security-tests/{securityTestUid}`
- Auth: API key in header `X-ESCAPE-API-KEY`

Get a security test from the organization catalog by uid, with its organization configuration (enabled state and custom severity) and open issue counts.

## Path parameters

- `securityTestUid` string, required: The uid of the security test

## Response `200`

OK

- object
  - `id` string, required: The uid of the security test
  - `name` string, required: The human readable name of the security test
  - `category` 'ACCESS_CONTROL' | 'CONFIGURATION' | 'CUSTOM' | 'INFORMATION_DISCLOSURE' | 'INJECTION' | 'PROTOCOL' | 'REQUEST_FORGERY' | 'RESOURCE_LIMITATION' | 'SCHEMA' | 'SENSITIVE_DATA', required: The issue category this test belongs to
  - `description` string, required: The description of the security test
  - `documentationPath` string, required: Relative path to the security test documentation
  - `scanners` string[], required: Scanner kinds that can run this security test
  - `assetTypes` string[], required: Asset types this security test applies to
  - `enabled` boolean, required: Whether the test is enabled for the organization (defaults to true)
  - `defaultSeverity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM' | 'null', nullable, required: The default severity of the test
  - `customSeverity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM' | 'null', nullable, required: The organization override of the severity, null when not overridden
  - `severity` 'CRITICAL' | 'HIGH' | 'INFO' | 'LOW' | 'MEDIUM' | 'null', nullable, required: The effective severity: `customSeverity` when set, otherwise `defaultSeverity`
  - `cvssScore` number, nullable, required: The CVSS score of the test, when available
  - `cvssVector` string, nullable, required: The CVSS vector of the test, when available
  - `compliance` object[], required: Compliance mappings associated with the test
    - `framework` 'BITSIGHT' | 'CRA' | 'CWE' | 'DORA' | 'FEDRAMP' | 'GDPR' | 'HIPAA' | 'HITRUST_CSF' | 'IEC62443' | 'ISO27001' | 'MITRE_ATTACK' | 'NIS2' | 'NIST' | 'OWASP' | 'OWASP_ASVS' | 'OWASP_LLM' | 'PCI_DSS' | 'PSD2' | 'SECURITY_SCORECARD' | 'SOC2' | 'WASC', required: The compliance framework name
    - `item` string, required: The compliance item identifier within the framework
  - `issueCounts` object, required: Open issue counts for this test in the organization
    - `critical` integer, required: Number of open CRITICAL issues for this test
    - `high` integer, required: Number of open HIGH issues for this test
    - `medium` integer, required: Number of open MEDIUM issues for this test
    - `low` integer, required: Number of open LOW issues for this test
    - `info` integer, required: Number of open INFO issues for this test

## Other responses

- `404`: Not found

---

[API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)