---
title: "Get Category Distribution"
method: GET
path: "/v1/findings/category-distribution"
tags: ["Analytics"]
---

# Get Category Distribution

`GET /v1/findings/category-distribution`

## Request

- Base URL: `https://api.mindfort.app`
- URL: `https://api.mindfort.app/v1/findings/category-distribution`
- Auth: HTTP bearer

Returns finding counts by OWASP category and by vulnerability tag, for your organization or a single target.

## Query parameters

- `target_id` string, uuid

## Response `200`

Successful response

- CategoryDistributionResponse
  - `owasp_category_distribution` OwaspCategoryDistribution, required
    - `broken_access_control` integer, required
    - `cryptographic_failures` integer, required
    - `injection` integer, required
    - `insecure_design` integer, required
    - `security_misconfiguration` integer, required
    - `vulnerable_components` integer, required
    - `auth_failures` integer, required
    - `data_integrity_failures` integer, required
    - `logging_monitoring_failures` integer, required
    - `ssrf` integer, required
    - `count` integer, required: Recognized OWASP category assignments. Findings without a recognized category are omitted.
  - `vulnerability_tag_distribution` VulnerabilityTagDistribution, required
    - `xss` integer, required
    - `sql_injection` integer, required
    - `command_injection` integer, required
    - `ssti` integer, required
    - `xxe` integer, required
    - `path_traversal` integer, required
    - `broken_access_control` integer, required
    - `idor` integer, required
    - `csrf` integer, required
    - `open_redirect` integer, required
    - `information_disclosure` integer, required
    - `api_security` integer, required
    - `ssrf` integer, required
    - `file_upload` integer, required
    - `business_logic` integer, required
    - `security_misconfiguration` integer, required
    - `clickjacking` integer, required
    - `network_security` integer, required
    - `authentication` integer, required
    - `session_management` integer, required
    - `cryptographic_issues` integer, required
    - `vulnerable_components` integer, required
    - `insecure_deserialization` integer, required
    - `logging_monitoring` integer, required
    - `count` integer, required: Recognized tag assignments, not distinct findings. A finding with multiple tags contributes to multiple buckets.

## Other responses

- `400`: Invalid request
- `401`: Missing or invalid API key
- `403`: Not permitted for this organization
- `404`: Resource not found

---

[API](https://skmtc.dev/mindfort/apis/mindfort-api.md) - [All operations](https://skmtc.dev/mindfort/apis/mindfort-api/llms.txt) - [OpenAPI document](https://skmtc.dev/mindfort/apis/mindfort-api/revisions/cb93bd79eebe?raw)