--- title: "Organization Findings" method: GET path: "/api/v1/reports/org/{orgId}/findings" tags: ["Reports"] --- # Organization Findings `GET /api/v1/reports/org/{orgId}/findings` ## Organization Findings Get all findings for your organization as JSON or CSV (Comma Seperated Values). Findings can be filtered by application UUIDs and/or environment names if supplied as query parameters. Using the `date` query parameter you can return the findings for your apps and environments for that point in time. If no `date` parameter is supplied findings will be for the current date. To retrieve findings in your desired format use the `Accept` header to specify the media type. | oputput format | Accept header | |----------------|----------------------------| | `JSON` | `Accept: application/json` | | `CSV` | `Accept: text/csv` | ### Example Return results as CSV ```shell curl -s -H 'Accept: text/csv' -H "Authorization: Bearer $JWT_TOKEN" 'https://api.stackhawk.com/api/v1/reports/org/ea7dc269-e4c2-41d1-aced-823087ca3e1a/findings?pageSize=500&envs=Development scanId, applicationId, applicationName, environmentId, environmentName, status, findingPluginId, findingPluginName, findingRisk, findingUrl, findingMethod, findingEvidence, findingOtherInfo, findingDescription, findingFirstSeen, findingLastSeen 5e88b6f1-ab2a-43ce-8ca3-d72acda82de0, 85d1b3a5-4d27-46bc-ae53-28a5560199ad, JavaVulny, 0ecc65fe-64a6-45ef-b059-c710bee3155f, Development, NEW, 10038-1, Content Security Policy (CSP) Header Not Set, Medium, https://localhost:9000/payloads, GET, , , "Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.", 2022-04-01T17:27:35.558Z, 2024-03-02T23:07:19.796Z 5e88b6f1-ab2a-43ce-8ca3-d72acda82de0, 85d1b3a5-4d27-46bc-ae53-28a5560199ad, JavaVulny, 0ecc65fe-64a6-45ef-b059-c710bee3155f, Development, NEW, 10010, Cookie No HttpOnly Flag, Low, https://localhost:9000/login-code, GET, Set-Cookie: XLOGINID, , "A cookie has been set without the HttpOnly flag, which means that the cookie can be accessed by JavaScript. If a malicious script can be run on this page then the cookie will be accessible and can be transmitted to another site. If this is a session cookie then session hijacking may be possible.", 2024-03-01T23:14:50.768Z, 2024-03-02T23:09:33.409Z ``` > Requires `read:report` permission. ## Path parameters - `orgId` string, uuid, required ## Query parameters - `appIds` string[] - `envs` string[] - `date` string - `datetime` string - `pageSize` integer - `pageToken` integer ## Response `200` StackHawk DAST security findings results. - ReportsCurrentFindingsResponse — StackHawk DAST security findings results. - `findings` ReportsCurrentFindingRow[] — The list of security findings for the page of data requested. - `applicationId` string — The application UUID. - `applicationName` string — The application display name. - `cweId` string — To cwe ID of the plugin related to this finding - `environmentId` string — The environment UUID. - `environmentName` string — The environment display name. - `findingDescription` string — The non-contextual finding plugin description. - `findingEvidence` string — The evidence, if any, related to this finding. - `findingFirstSeen` integer — The first time this finding was seen on this method and url combination as milliseconds since epoch. - `findingFirstSeenExcelFormat` string — The first time this finding was seen on this method and url combination in Excel format. - `findingFirstSeenISO8601` string — The first time this finding was seen on this method and url combination in ISO 8601 format. - `findingHash` string — The finding hash. Generated from the combination of path, method, parameters, pluginId, applicationId, environmentId. - `findingLastSeen` integer — The last time this finding was seen on this method and url combination as milliseconds since epoch. - `findingLastSeenExcelFormat` string — The last time this finding was seen on this method and url combination in Excel format. - `findingLastSeenISO8601` string — The last time this finding was seen on this method and url combination in ISO 8601 format. - `findingMethod` string — The HTTP request method of the finding. - `findingOtherInfo` string — More contextual information about the specific finding, if any, supplied by the finding plugin. - `findingPluginId` string — The finding plugin id. - `findingPluginName` string — The finding plugin display name - `findingRisk` string — The finding plugin risk level. - `findingUrl` string — The url the finding was found on. - `remediationAdvice` string — The recommended solution for this finding - `scanDuration` integer — The length of time the scan took, in seconds - `scanDurationISO8601` string — A human readable format for the scan duration - `scanId` string — The scan UUID that found the finding. - `scanUserId` string — The user id of the scan that found the finding. - `scanUserName` string — The user name of the scan that found the finding. - `stackhawkPlatformLink` string — Absolute deep-link URL to this finding's detail page in the StackHawk platform. Format: https:///scans/{scanId}/finding/{pluginId}/path/{uriId}/message/{messageId} - `status` 'NEW' | 'FALSE_POSITIVE' | 'RISK_ACCEPTED' | 'ASSIGNED' — The most recent triage status of this finding at the time of last seen. - `team` string — The team name of the scan that found the finding. - `totalFindings` integer — The total findings available for all pages. ## Other responses - `401` — Unauthorized --- [API](https://skmtc.dev/stackhawk/apis/stackhawk-public-api.md) · [All operations](https://skmtc.dev/stackhawk/apis/stackhawk-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/stackhawk/stackhawk-public-api/revisions/8252990ac9eb/schema)