---
title: "Get security posture"
method: POST
path: "/api/v1/stats/securityPosture"
tags: ["Stats"]
---

# Get security posture

`POST /api/v1/stats/securityPosture`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v1/stats/securityPosture`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

## Request body

- object
  - `organizationId` string
  - `projectId` string
  - `startDate` string, date
  - `endDate` string, date
  - `timeGranularity` 'day' | 'week' | 'month' | 'quarter'
  - `severities` string[]
  - `vulnClasses` string[]

## Response `200`

Successful response

- SecurityPostureResponse
  - `summary` object, required
    - `overallRiskScore` number, required
    - `riskTrend` 'improving' | 'worsening' | 'stable', required
    - `totalOpenIssues` number, required
    - `openIssuesByStatus` object, required: Current open findings by workflow status, summing to totalOpenIssues.
      - `PENDING_REVIEW` integer, required
      - `REVIEWING` integer, required
      - `PATCHING` integer, required
      - `BACKLOG` integer, required
    - `criticalIssues` number, required
    - `highIssues` number, required
    - `mediumIssues` number, required
    - `lowIssues` number, required
    - `vulnerabilityDensity` number, required
    - `repositoriesAtRisk` number, required
    - `totalRepositories` number, required
    - `reachableExploitableIssues` number, required
    - `meanRemediationTime` number, nullable, required: Mean days from detection to resolution over the issues resolved in the selected range; null when none resolved.
    - `resolvedIssuesInWindow` integer, required: Number of issues resolved in the selected range: the population meanRemediationTime averages. 0 when none resolved.
    - `averagePrScanTime` number, required
  - `exposure` object, required
    - `meanCriticalExposure` number, nullable, required
    - `meanHighExposure` number, nullable, required
    - `meanMediumExposure` number, nullable, required
    - `meanLowExposure` number, nullable, required
    - `meanInfoExposure` number, nullable, required
    - `oldestCriticalAge` number, nullable, required
    - `oldestHighAge` number, nullable, required
    - `oldestMediumAge` number, nullable, required
    - `oldestLowAge` number, nullable, required
    - `oldestInfoAge` number, nullable, required
  - `trends` object[], required
    - `date` string, date, required
    - `openIssues` number, required
    - `newIssues` number, required
    - `resolvedIssues` number, required
    - `riskScore` number, required
    - `criticalIssues` number, required
    - `meanRemediationTime` number, nullable, required: Deprecated: cumulative mean days to resolve from the range start to this period, so the same date reads differently per range. Will be removed; use meanRemediationTimeInPeriod.
    - `meanRemediationTimeInPeriod` number, nullable, required: Mean days from detection to resolution over the issues resolved in this period only (resolvedIssues is its sample size); null when none resolved.
    - `exposure` object, required
      - `meanCriticalExposure` number, nullable, required
      - `meanHighExposure` number, nullable, required
      - `meanMediumExposure` number, nullable, required
      - `meanLowExposure` number, nullable, required
      - `meanInfoExposure` number, nullable, required
      - `oldestCriticalAge` number, nullable, required
      - `oldestHighAge` number, nullable, required
      - `oldestMediumAge` number, nullable, required
      - `oldestLowAge` number, nullable, required
      - `oldestInfoAge` number, nullable, required
  - `topRiskFactors` object[], required
    - `vulnClass` string, required
    - `count` number, required
  - `repositoryRiskScores` object[], required
    - `id` string, required
    - `name` string, required
    - `riskScore` number, required
    - `openIssues` number, required
    - `criticalIssues` number, required
    - `highIssues` number, required
    - `mediumIssues` number, required
    - `lowIssues` number, required
    - `infoIssues` number, required

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api-2.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api-2/revisions/ea6ae4b68cd3?raw)