---
title: "List Exposures"
method: GET
path: "/projects/{project_id}/exposures"
tags: ["Exposures"]
---

# List Exposures

`GET /projects/{project_id}/exposures`

## Request

- Base URL: `https://api.securitytrails.com/v2`
- URL: `https://api.securitytrails.com/v2/projects/{project_id}/exposures`
- Auth: none declared

Retrieve the exposure signatures found on assets in the project, along with the count of affected assets for each signature.
The list can be filtered by CVE, CVSS score, CWE or severity, or searched with `query`.

The result is sorted by signature severity in descending order.

If `next_cursor` is present in the response, it can be used to fetch the next page of results by passing it as `cursor`.

## Path parameters

- `project_id` string, required: The ID of the project

## Query parameters

- `limit` integer: The number of exposures
- `filter_cve_id` string, nullable: Filter for exposure tied to a vulnerability with the provided CVE
- `filter_cvss_score_gte` number, nullable: Filter for exposures tied to a vulnerability with the provided CVSS score greater or equal
- `filter_cvss_score_lte` number, nullable: Filter for exposures tied to a vulnerability with the provided CVSS score less or equal
- `filter_cwe_id` string, nullable: Filter for exposure tied to a vulnerability associated with the provided CWE
- `filter_severity` 'informational' | 'moderate' | 'critical'
- `filter_severity_exact` 'informational' | 'moderate' | 'critical'
- `filter_severity_min` 'informational' | 'moderate' | 'critical'
- `cursor` string, nullable: Integer offset for pagination. Pass the value from `next_cursor` in the previous response to fetch the next page.
- `query` string, nullable: Free-text search matched against the signature's name and ID. If given in `YYYY-MM-DD` format, also matches signatures by the date they were added.

## Response `200`

Successful Response

- ApiListResponseExposureSummary
  - `data` ExposureSummary[], required
    - `signature` ExposureSignatureResponse, required
      - `id` string, required
      - `name` string
      - `description` string, nullable
      - `severity` union, required
        - 'informational' | 'moderate' | 'critical'
        - string
      - `remediation_steps` object, nullable
      - `added_at` string, date-time, nullable: Date when this signature was added to ASI
      - `references` string[], nullable
      - `vulnerabilities` VulnerabilityPublic[]
        - `name` string, required
        - `cve_id` string, required: The Common Vulnerabilities and Exposures (CVE) identifier for this vulnerability.
        - `cwe_ids` string[]: Common Weakness Enumeration (CWE) IDs associated with this vulnerability
        - `cvss_score` number, nullable
    - `asset_count` integer, required
  - `meta` ApiMeta, required
    - `params` object, nullable
    - `counts` ApiCount
      - `total` integer, nullable
      - `returned` integer, required
    - `pagination` PaginationResponse
      - `next_cursor` string, nullable: An opaque value which should be passed as the `cursor` to retrieve the nextpage of results
      - `limit` integer, nullable: The number of items returned
      - `total` integer, nullable
      - `sort` array[], nullable: The sort order of the results
        - unknown[]
          - unknown
    - `request_id` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence.md) - [All operations](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/attack-surface-intelligence/revisions/7fd5c7304957?raw)