---
title: "Get FSPM security findings"
method: GET
path: "/security/fspm/findings"
tags: ["Security Posture Management"]
---

# Get FSPM security findings

`GET /security/fspm/findings`

## Request

- Base URL: `https://api.fireblocks.io/v1`
- URL: `https://api.fireblocks.io/v1/security/fspm/findings`
- Auth: none declared
- TypeScript: <https://skmtc.dev/fireblocks/apis/fireblocks-api/docs/security/fspm/findings/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a paginated list of FSPM security findings for the workspace.
Endpoint Roles: Security Admin, Security Auditor.

**Note:** This endpoint is available only for the FSPM Pro package. It is not available for FSPM Basic.

## Query parameters

- `pageCursor` string
- `pageSize` integer
- `severity` 'INFO' | 'LOW' | 'MEDIUM' | 'HIGH'
- `category` 'USER_MANAGEMENT' | 'APPROVAL_GROUP_MANAGEMENT' | 'POLICY_ENGINE_UTILIZATION' | 'WORKSPACE_CONFIGURATION' | 'DEFI_ACCESS' | 'FLEET_MANAGEMENT'
- `status` 'OPEN' | 'ACCEPTED' | 'RESOLVED'

## Response `200`

A paginated list of FSPM findings

- GetFindingsExternalResponse
  - `data` SecurityFinding[], required: List of FSPM findings for the current page.
    - `id` string, uuid: Unique identifier of the finding
    - `status` 'OPEN' | 'ACCEPTED' | 'RESOLVED': Current status of the finding
    - `severity` 'INFO' | 'LOW' | 'MEDIUM' | 'HIGH': Severity level of the finding
    - `category` 'USER_MANAGEMENT' | 'APPROVAL_GROUP_MANAGEMENT' | 'POLICY_ENGINE_UTILIZATION' | 'WORKSPACE_CONFIGURATION' | 'DEFI_ACCESS' | 'FLEET_MANAGEMENT': Category of the finding
    - `createdAt` string, date-time: When the finding was first detected
    - `title` string: Human-readable title of the finding
  - `total` integer, required: Total number of findings matching the query.
  - `next` string: Cursor for the next page of results, omitted when there are no more results.

## Other responses

- `400`: Bad request — invalid or malformed query parameters.
- `401`: Unauthorized — missing or invalid authentication token.
- `403`: Forbidden — insufficient permissions or feature is disabled.
- `429`: Too many requests — rate limit exceeded, slow down and retry later.
- `5XX`: Internal error.
- `default`: Error Response

---

[API](https://skmtc.dev/fireblocks/apis/fireblocks-api.md) - [All operations](https://skmtc.dev/fireblocks/apis/fireblocks-api/llms.txt) - [OpenAPI document](https://skmtc.dev/fireblocks/apis/fireblocks-api/revisions/4eba9965659a?raw)