---
title: "List the first seen (new) and/or updated findings in a given date range for a company."
method: GET
path: "/api/v2/companies/{id}/findings"
tags: ["Findings"]
---

# List the first seen (new) and/or updated findings in a given date range for a company.

`GET /api/v2/companies/{id}/findings`

List the first seen (new) and/or updated findings in a given date range for a company. Date range can be maximum 15 days apart. Beware that the response contains the current status of the finding. So, for example, a returned finding might be first seen between the given date range, however, it might also be updated to be fixed between the same date range. Also beware that this endpoint might throw HTTP 524 Timeouts under heavy traffic when high page sizes are being used. If so, please try lowering page sizes and retry again. <br/><br/> For storage optimization, the system <b>permanently</b> deletes all findings that haven't been detected by the Black Kite scanner for over a year. Findings with manually changed statuses or associated tickets are excluded.

## Path parameters

- `id` integer, required

## Query parameters

- `page_number` integer
- `page_size` 10 | 20 | 30 | 50 | 100 | 250 | 500 | 1000 | 5000
- `start_date` string, date-time, required
- `end_date` string, date-time, required
- `type` 'New' | 'Updated' | 'All', required

## Response `200`

Success

- Finding[]
  - `Module` string — The module of this finding. The possible responses are listed below. - DNS Health - Email Security - SSL/TLS Strength - Application Security - DDoS Resiliency - Network Security - Fraudulent Domains - Fraudulent Apps - Credential Mgmt. - IP Reputation - Hacktivist Shares - Social Network - Attack Surface - Brand Monitoring - Patch Management - Web Ranking - Information Disclosure - CDN Security - Website Security
  - `FindingId` integer — The unique identifier of this finding.
  - `Status` 'Active' | 'FalsePositive' | 'Suppressed' | 'Acknowledged' | 'Deleted' | 'Remediated' — The status of this finding. - Active, means the finding is still active with no review as of yet. - FalsePositive, means the finding is considered to be false alarm. - Suppressed, means the finding is suppressed, similar to FalsePositive. - Acknowledged, means the finding is accepted, for example will not be fixed. - Deleted, means the finding is deleted, similar to FalsePositive. - Remediated, means the finding is mitigated.
  - `FirstSeenDate` string, date-time — The date that the finding was found.
  - `UpdateDate` string, date-time — The last date that the finding was updated. If the UpdateDate equals to the FirstSeenDate or the UpdateDate is null that means the finding is NEW, otherwise the finding is UPDATED.

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `default` — Failure

---

[API](https://skmtc.net/blackkitetech/apis/black-kite-api.md) · [All operations](https://skmtc.net/blackkitetech/apis/black-kite-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/blackkitetech/black-kite-api/revisions/7dadaba760fb/schema)