---
title: "Get workspace security insights"
method: GET
path: "/v1/workspaces/{workspace_id}/security-center/insights"
tags: ["security-governance"]
---

# Get workspace security insights

`GET /v1/workspaces/{workspace_id}/security-center/insights`

**Plan:** `Enterprise`

Returns the workspace security insights summary.

## Path parameters

- `workspace_id` string, required — Workspace ID

## Query parameters

- `review_priority` string[], nullable — Repeat to keep only findings at these review priorities (needs_review=critical, review_recommended=high+medium, no_review_needed=low+minimal). Omit for all.
- `severity` string[], nullable — Deprecated (ENT-3348): alias for review_priority; values from both parameters are combined.

## Response `200`

OK

- V1WorkspaceInsightsBody
  - `as_of` string, date-time — Conservative workspace-wide freshness horizon for the risk rollups; individual project rollups may be newer.
  - `findings` V1WorkspaceInsightsFinding[], nullable, required — Finding-catalog counts, dominance-suppressed and severity-ordered.
    - `category` string, required — Finding category (e.g. data, access, exposure).
    - `description` string, required — Human-readable finding description.
    - `id` string, required — Stable finding-catalog slug (e.g. public_pii_exposure, orphaned_owner).
    - `project_count` integer, required — Projects matching this finding.
    - `severity` string, required — Review priority: needs_review | review_recommended | no_review_needed.
    - `title` string, required — Human-readable finding title.
  - `summary` V1WorkspaceInsightsSummary, required
    - `externally_published` V1WorkspaceInsightsStat, required
      - `delta_30d` integer, required — Signed change over the delta window.
      - `delta_window` string, required — Human-readable window for delta_30d (e.g. "30 days").
      - `value` integer, required — Current count.
    - `risk` V1WorkspaceInsightsReviewPriority, required
      - `needs_review` integer, required — Projects that need review (critical risk).
      - `no_review_needed` integer, required — Projects that don't need review (low or minimal risk).
      - `review_recommended` integer, required — Projects where review is recommended (high or medium risk).
    - `total_projects` V1WorkspaceInsightsStat, required
      - `delta_30d` integer, required — Signed change over the delta window.
      - `delta_window` string, required — Human-readable window for delta_30d (e.g. "30 days").
      - `value` integer, required — Current count.
    - `workspace_members` V1WorkspaceInsightsStat, required
      - `delta_30d` integer, required — Signed change over the delta window.
      - `delta_window` string, required — Human-readable window for delta_30d (e.g. "30 days").
      - `value` integer, required — Current count.

## Other responses

- `401` — Missing or invalid API key.
- `402` — This operation or requested configuration requires a workspace plan that includes this feature.
- `403` — The key or caller lacks the required scope or permission.
- `406` — The Accept header excludes every media type this endpoint produces.
- `429` — Too many requests. Retry after the interval in Retry-After when present.
- `default` — Error. The response body uses the standard error envelope; status matches the HTTP status code and type is a machine-readable error code.

---

[API](https://skmtc.net/lovable/apis/lovable-api.md) · [All operations](https://skmtc.net/lovable/apis/lovable-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lovable/lovable-api/revisions/aa8d44585147/schema)