---
title: "Update a finding"
method: PATCH
path: "/v1/findings/{id}"
tags: ["Findings"]
---

# Update a finding

`PATCH /v1/findings/{id}`

Update a finding. Status transition rules apply based on user role.

## Path parameters

- `id` string, required

## Request body

- UpdateFindingDto
  - `status` 'open' | 'ready_for_review' | 'needs_revision' | 'closed' — Finding status
  - `type` 'soc2' | 'iso27001' — Type of finding (SOC 2 or ISO 27001)
  - `content` string — Finding content/message
  - `revisionNote` object, nullable — Auditor note when requesting revision (only for needs_revision status)

## Response `200`

The updated finding

## Other responses

- `401` — Unauthorized
- `403` — Forbidden - Insufficient permissions for status transition
- `404` — Finding not found

## Changes

- **2026-03-05** `946edaa856a9` — 1 warning
  - deleted the `header` request parameter `X-Organization-Id`

[Change history](https://skmtc.dev/om-network/apis/betayum-api/changes/v1/findings/:id/patch.md)

---

[API](https://skmtc.dev/om-network/apis/betayum-api.md) · [All operations](https://skmtc.dev/om-network/apis/betayum-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/om-network/betayum-api/revisions/ac8d1e4e2e79/schema)