---
title: "All StackHawk scan policies"
method: GET
path: "/api/v1/policy/all"
tags: ["Scan Policies"]
---

# All StackHawk scan policies

`GET /api/v1/policy/all`

## StackHawk Policies
This endpoint lists all available StackHawk scan policies. Each scan policy provides details of the policy configuration, including the set of plugins and technology flags.

**Functionality:**
- Useful for understanding the range of pre-configured scan policies available for HawkScan.
- The list provided by this endpoint is dynamic, reflecting updates and additions to the scan policies. StackHawk makes regular updates to our policies as new plugins are made available.

**Note:**
- This endpoint is not paginated, as the list of policies is finite.


> Requires `read:policy` permission.

## Response `200`

OK

- ScanpolicyListScanPoliciesResponse
  - `scanPolicies` ScanpolicyScanPolicy[]
    - `applicationId` string — The UUID identifier of the scan policy application. If no application ID is present, the scan policy is defined by StackHawk. If the application ID is present, then the scan policy is customized for the given application only.
    - `description` string — The description for this policy.
    - `displayName` string — The human readable display name for this policy.
    - `id` string — The UUID identifier of this scan policy.
    - `isCustomized` boolean — Indicates whether the plugins have been updated from original scan policy.
    - `name` string — The referencable unique name of a StackHawk scan policy.
    - `plugins` ScanpolicyPlugin[] — List of the plugins defined for this policy.
      - `defaultRisk` 'UNKNOWN' | 'INFO' | 'LOW' | 'MEDIUM' | 'HIGH' — Default risk for this plugin. Currently unused.
      - `enabled` boolean — Enables the plugin. Plugins will only run in a scan when marked as enabled.
      - `name` string — The Plugin name.
      - `pluginId` string — The UUID identifier of this plugin.
      - `pluginType` 'ACTIVE' | 'PASSIVE' — The type of plugin to run as. Either ACTIVE or PASSIVE.
      - `status` 'ADDON_STATUS_ALPHA' | 'ADDON_STATUS_BETA' | 'ADDON_STATUS_RELEASE' — The release quality of this plugin.
      - `strength` 'STRENGTH_LOW' | 'STRENGTH_MEDIUM' | 'STRENGTH_HIGH' | 'STRENGTH_INSANE' | 'STRENGTH_OFF' — The strength of this plugin. Currently unused.
      - `threshold` 'THRESHOLD_LOW' | 'THRESHOLD_MEDIUM' | 'THRESHOLD_HIGH' | 'THRESHOLD_OFF' — The threshold of this plugin. Currently unused.
    - `techFlags` object — Technology flags for this policy. This is a collection of specific technology identifiers that further configure scan behavior.

---

[API](https://skmtc.net/stackhawk/apis/stackhawk-public-api.md) · [All operations](https://skmtc.net/stackhawk/apis/stackhawk-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stackhawk/stackhawk-public-api/revisions/ad3dfd54cb63/schema)