---
title: "List audit findings"
method: GET
path: "/v1/findings"
tags: ["Findings"]
---

# List audit findings

`GET /v1/findings`

List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.

## Query parameters

- `status` 'open' | 'ready_for_review' | 'needs_revision' | 'closed'
- `severity` 'low' | 'medium' | 'high' | 'critical'
- `area` 'people' | 'documents' | 'compliance' | 'risks' | 'vendors' | 'policies' | 'other'
- `taskId` string
- `evidenceSubmissionId` string
- `evidenceFormType` 'board-meeting' | 'it-leadership-meeting' | 'risk-committee-meeting' | 'meeting' | 'access-request' | 'whistleblower-report' | 'penetration-test' | 'rbac-matrix' | 'infrastructure-inventory' | 'employee-performance-evaluation' | 'network-diagram' | 'tabletop-exercise'
- `policyId` string
- `vendorId` string
- `riskId` string
- `memberId` string
- `deviceId` string

## Response `200`

## Changes

- **2026-04-23** `68ee027be02b` — 1 info
  - added the new optional `query` request parameter `severity`
- **2026-04-20** `6e22489e33cb` — 1 warning, 10 info
  - deleted the `query` request parameter `scope`
  - api operation id `FindingsController_getFindingsByTask_v1` removed and replaced with `FindingsController_listFindings_v1`
  - added the new optional `query` request parameter `area`
  - added the new optional `query` request parameter `deviceId`
  - …7 more
- **2026-04-16** `ac8d1e4e2e79` — 1 info
  - added the new optional `query` request parameter `scope`
- **2026-03-05** `946edaa856a9` — 1 warning
  - deleted the `header` request parameter `X-Organization-Id`

[Change history](https://skmtc.dev/om-network/apis/betayum-api/changes/v1/findings/get.md)

---

[API](https://skmtc.dev/om-network/apis/betayum-api.md) · [All operations](https://skmtc.dev/om-network/apis/betayum-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/om-network/betayum-api/revisions/95679a9aa625/schema)