---
title: "Get security review by ID"
method: GET
path: "/vendors/{vendorId}/security-reviews/{securityReviewId}"
tags: ["Vendors"]
---

# Get security review by ID

`GET /vendors/{vendorId}/security-reviews/{securityReviewId}`

## Request

- Base URL: `https://api.vanta.com`
- URL: `https://api.vanta.com/vendors/{vendorId}/security-reviews/{securityReviewId}`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/vanta/apis/build-integrations/docs/vendors/:vendorId/security-reviews/:securityReviewId/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a security review.

## Path parameters

- `vendorId` string, required
- `securityReviewId` string, required

## Response `200`

Ok

- SecurityReview
  - `id` string, required: Unique identifier for the security review.
  - `vendorId` string, required: Unique identifier for the vendor.
  - `decisionNotes` string, nullable, required: Notes about the security review's decision status.
  - `comments` string, nullable, required: Comments about the security review.
  - `completedByUserId` string, nullable, required: The Vanta user ID of the person who completed this review.
  - `startDate` string, date-time, nullable, required: The timestamp of the when the security review was started.
  - `dueDate` string, date-time, nullable, required: The timestamp of the when the security review is due.
  - `overrideDueDate` string, date-time, nullable, required: A manual override timestamp of the when the security review is due.
  - `completionDate` string, date-time, nullable, required: The timestamp of the when the security review was marked as completed.
  - `decision` object, nullable, required: An object containing information about the decision of the review.
    - `lastUpdatedAt` string, date-time, required: The timestamp of when the security review decision was last set.
    - `status` 'APPROVED' | 'NOT_APPROVED' | 'CONDITIONALLY_APPROVED', required: The current decision made for an assessment: - APPROVED: The assessment has been approved. - NOT_APPROVED: The assessment has been marked not approved. - CONDITIONALLY_APPROVED: The assessment has been conditionally approved.
  - `assessmentType` AssessmentType, required
    - `id` string, required: Unique identifier for the assessment type.
    - `name` string, required: Display name of the assessment type.
    - `description` string, nullable, required: Description of the assessment type, if set.
  - `owner` AssessmentOwner, required
    - `id` string, required: Unique identifier for the owner.
    - `type` 'USER' | 'TEAM', required
    - `displayName` string, nullable, required: Display name of the owner, if available.
    - `email` string, nullable, required: Email of the owner. Populated for USER owners, null for TEAM owners.

---

[API](https://skmtc.dev/vanta/apis/build-integrations.md) - [All operations](https://skmtc.dev/vanta/apis/build-integrations/llms.txt) - [OpenAPI document](https://skmtc.dev/vanta/apis/build-integrations/revisions/6c1f7590538b?raw)