---
title: "Update a FSPM security finding by ID"
method: PATCH
path: "/security/fspm/findings/{id}"
tags: ["Security Posture Management"]
---

# Update a FSPM security finding by ID

`PATCH /security/fspm/findings/{id}`

## Request

- Base URL: `https://api.fireblocks.io/v1`
- URL: `https://api.fireblocks.io/v1/security/fspm/findings/{id}`
- Auth: none declared
- TypeScript: <https://skmtc.dev/fireblocks/apis/fireblocks-api/docs/security/fspm/findings/:id/patch.ts> (a function with typed inputs; its response is checked against the schema)

Accepts or reopens a finding for the workspace. When accepting a finding
(`status: "ACCEPTED"`), `statusUpdatedReason` is required.
Endpoint Roles: Security Admin.

**Note:** This endpoint is available only for the FSPM Pro package. It is not available for FSPM Basic.

## Path parameters

- `id` string, uuid, required

## Headers

- `Idempotency-Key` string

## Request body

- union: Request to update the status of a FSPM finding. Only OPEN (reopen) and ACCEPTED (accept) are settable; findings become RESOLVED via automated detection, not through this API. `statusUpdatedReason` is required when accepting a finding and ignored when reopening.
  - AcceptFindingRequest: Request to accept a FSPM finding. A reason is required.
    - `status` 'ACCEPTED', required: Marks the finding as accepted.
    - `statusUpdatedReason` string, required: The reason for accepting the finding.
  - ReopenFindingRequest: Request to reopen a FSPM finding.
    - `status` 'OPEN', required: Marks the finding as open again.
    - `statusUpdatedReason` string: Ignored when reopening a finding.

## Response `200`

The updated FSPM finding

- SecurityFindingDetailed
  - `id` string, uuid, required: Unique identifier of the finding
  - `status` 'OPEN' | 'ACCEPTED' | 'RESOLVED', required: Current status of the finding
  - `severity` 'INFO' | 'LOW' | 'MEDIUM' | 'HIGH', required: Severity level of the finding
  - `category` 'USER_MANAGEMENT' | 'APPROVAL_GROUP_MANAGEMENT' | 'POLICY_ENGINE_UTILIZATION' | 'WORKSPACE_CONFIGURATION' | 'DEFI_ACCESS' | 'FLEET_MANAGEMENT', required: Category of the finding
  - `createdAt` string, date-time, required: When the finding was first detected
  - `title` string, required: Human-readable title of the finding
  - `statusUpdatedAt` string, date-time: When the finding status was last updated, omitted if the status was never updated
  - `statusUpdatedByUserId` string, uuid: The user who last updated the finding status, omitted if the status was never updated
  - `statusUpdatedReason` string: The reason provided for the last status update, omitted if none was provided
  - `info` FindingInfo, required: Additional structured context about the finding. Shape varies by finding type.
  - `complianceReqs` ComplianceRequirement[], required: Compliance requirements this finding relates to
    - `id` string, uuid, required: Identifier of the compliance requirement
    - `standard` string, required: The compliance standard this requirement belongs to
    - `criteria` string, required: The specific criteria within the compliance standard
    - `description` string: Human-readable description of the requirement, omitted if not available
  - `riskExplanation` string, required: Explanation of the risk this finding represents
  - `mitigationGuidance` string, required: Guidance on how to mitigate this finding

## Other responses

- `default`: Error Response

---

[API](https://skmtc.dev/fireblocks/apis/fireblocks-api.md) - [All operations](https://skmtc.dev/fireblocks/apis/fireblocks-api/llms.txt) - [OpenAPI document](https://skmtc.dev/fireblocks/apis/fireblocks-api/revisions/4eba9965659a?raw)