---
title: "Get Scans Comparison"
method: GET
path: "/api/v3.0/orgs/{orgUuid}/scans/compare"
tags: ["Scans"]
---

# Get Scans Comparison

`GET /api/v3.0/orgs/{orgUuid}/scans/compare`

Compares two scans within an organization and returns a structured diff of findings, including per-finding diff type (ADDED, REMOVED, MODIFIED, UNCHANGED), aggregate stats, and field-level change details for modified findings.

## Path parameters

- `orgUuid` string, required

## Query parameters

- `sourceScanUuid` string, required
- `targetScanUuid` string
- `type` 'security' | 'legal' | 'library', required

## Response `200`

OK

- DWRResponseV3ScanDiffResponseDTOV3
  - `supportToken` string
  - `response` ScanDiffResponseDTOV3
    - `source` ScanDTOV3
      - `uuid` string
      - `name` string
      - `engine` 'UNIFIED' | 'SCA' | 'SAST' | 'IAC' | 'IMG' | 'AI' | 'DAST'
      - `status` 'RUNNING' | 'PARTIAL' | 'PROCESSING' | 'FINISHED' | 'FAILED'
      - `projectId` integer
      - `productId` integer
      - `domainId` integer
      - `projectUuid` string
      - `processUuid` string
      - `hasViolations` boolean
      - `startTime` string, date-time
      - `endTime` string, date-time
      - `lastModified` string, date-time
      - `configurationName` string
      - `reference` string
      - `triggeredBy` string
      - `agentInfo` ScanAgentInfo
        - `agentName` string
        - `agentVersion` string
        - `errorMessage` string
      - `progress` ProgressDTO
        - `overallPercentage` integer, required
        - `currentStage` string, required
    - `target` ScanDTOV3
      - `uuid` string
      - `name` string
      - `engine` 'UNIFIED' | 'SCA' | 'SAST' | 'IAC' | 'IMG' | 'AI' | 'DAST'
      - `status` 'RUNNING' | 'PARTIAL' | 'PROCESSING' | 'FINISHED' | 'FAILED'
      - `projectId` integer
      - `productId` integer
      - `domainId` integer
      - `projectUuid` string
      - `processUuid` string
      - `hasViolations` boolean
      - `startTime` string, date-time
      - `endTime` string, date-time
      - `lastModified` string, date-time
      - `configurationName` string
      - `reference` string
      - `triggeredBy` string
      - `agentInfo` ScanAgentInfo
        - `agentName` string
        - `agentVersion` string
        - `errorMessage` string
      - `progress` ProgressDTO
        - `overallPercentage` integer, required
        - `currentStage` string, required
    - `stats` ScanDiffStatsDTOV3
      - `added` integer
      - `removed` integer
      - `modified` integer
      - `unchanged` integer
    - `findings` DiffUnifiedFindingDTOV3[]
      - `diffType` string
      - `finding` UnifiedFindingDTOV3
        - `uuid` string
        - `findingId` string
        - `findingName` string
        - `type` string
        - `severity` string
        - `score` number, float
        - `element` string
        - `elementId` string
        - `refId` string
        - `grouping` string
        - `status` string
        - `state` string
        - `suppressMetadata` SuppressMetadataDTO
          - `reason` string
          - `comment` string
          - `userEmail` string
          - `userUuid` string
          - `updatedAt` string
        - `paths` string[]
        - `sources` string[]
        - `createdAt` string, date-time
        - `updatedAt` string, date-time
        - `dynamicFields` object
        - `riskFactors` string[]
        - `riskFactorsJson` object
        - `engine` 'UNIFIED' | 'SCA' | 'SAST' | 'IAC' | 'IMG' | 'AI' | 'DAST'
        - `vendor` string
        - `orgUuid` string
        - `projectUuid` string
        - `projectName` string
        - `branch` string
        - `scanUuid` string
        - `firstScanUuid` string
        - `findingCategory` string
        - `hasViolation` boolean
        - `numberOfViolations` integer
        - `violationWorkflowUuids` string[]
        - `applicationUuid` string
        - `applicationName` string
        - `isNew` boolean
        - `isDetectedAtFirstScan` boolean
        - `isRemediationAvailable` boolean
      - `changes` DiffChangeDTOV3[]
        - `field` string
        - `before` object
        - `after` object

## Other responses

- `400` — Bad Request
- `403` — Forbidden

---

[API](https://skmtc.dev/mend/apis/mend-api.md) · [All operations](https://skmtc.dev/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mend/mend-api/revisions/b2302e1b6c4c/schema)