---
title: "List the ransomware findings for a company."
method: GET
path: "/api/v2/companies/{id}/findings/ransomware"
tags: ["Findings"]
---

# List the ransomware findings for a company.

`GET /api/v2/companies/{id}/findings/ransomware`

List the ransomware findings for a company. These findings might include Network Security, Patch Management, Credential Mgmt., Fraudulent Domains, IP Reputation, Information Disclosure, Hacktivist Shares, Email Security module findings.<br/><br/> For storage optimization, the system <b>permanently</b> deletes all findings that haven't been detected by the Black Kite scanner for over a year. Findings with manually changed statuses or associated tickets are excluded.

## Path parameters

- `id` integer, required

## Query parameters

- `page_number` integer
- `page_size` 10 | 20 | 30 | 50 | 100 | 250 | 500 | 1000 | 5000

## Response `200`

Success

- RansomwareFinding[]
  - `FindingId` integer — The unique identifier of this finding.
  - `Module` string — The module of this finding. The possible responses are listed below. - Network Security - Patch Management - Credential Mgmt. - Fraudulent Domains - IP Reputation - Information Disclosure - Hacktivist Shares - Email Security
  - `Url` string — The URL to get details of the finding. - For Network Security module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/networksecurity/{findingId} - For Patch Management module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/patchmanagement/{findingId} - For Credential Mgmt. module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/credentialmanagement/{findingId} - For Fraudulent Domains module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/fraudulentdomains/{findingId} - For IP Reputation module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/ipreputation/{findingId} - For Information Disclosure module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/informationdisclosure/{findingId} - For Hacktivist Shares module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/hacktivistshares/{findingId} - For Email Security module findings, the URL will point to https://app.blackkitetech.com/api/v2/companies/{id}/findings/emailsecurity/{findingId}

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `default` — Failure

---

[API](https://skmtc.net/blackkitetech/apis/black-kite-api.md) · [All operations](https://skmtc.net/blackkitetech/apis/black-kite-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/blackkitetech/black-kite-api/versions/7dadaba760fb/schema)