---
title: "List security reviews by vendor ID"
method: GET
path: "/vendors/{vendorId}/security-reviews"
tags: ["Vendors"]
---

# List security reviews by vendor ID

`GET /vendors/{vendorId}/security-reviews`

Returns a vendor's security reviews.

## Path parameters

- `vendorId` string, required

## Query parameters

- `pageSize` integer — Controls the maximum number of items returned in one response from the API.
- `pageCursor` string — A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.

## Response `200`

Ok

- PaginatedResponseSecurityReview
  - `results` object, required
    - `data` SecurityReview[], required
      - `id` string, required — Unique identifier for the security review.
      - `vendorId` string, required — Unique identifier for the vendor.
      - `decisionNotes` string, nullable, required — Notes about the security review's decision status.
      - `comments` string, nullable, required — Comments about the security review.
      - `completedByUserId` string, nullable, required — The Vanta user ID of the person who completed this review.
      - `startDate` string, date-time, nullable, required — The timestamp of the when the security review was started.
      - `dueDate` string, date-time, nullable, required — The timestamp of the when the security review is due.
      - `overrideDueDate` string, date-time, nullable, required — A manual override timestamp of the when the security review is due.
      - `completionDate` string, date-time, nullable, required — The timestamp of the when the security review was marked as completed.
      - `decision` object, nullable, required — An object containing information about the decision of the review.
        - `lastUpdatedAt` string, date-time, required — The timestamp of when the security review decision was last set.
        - `status` 'APPROVED' | 'NOT_APPROVED' | 'CONDITIONALLY_APPROVED', required — The current decision made for an assessment: - APPROVED: The assessment has been approved. - NOT_APPROVED: The assessment has been marked not approved. - CONDITIONALLY_APPROVED: The assessment has been conditionally approved.
      - `assessmentType` AssessmentType, required
        - `id` string, required — Unique identifier for the assessment type.
        - `name` string, required — Display name of the assessment type.
        - `description` string, nullable, required — Description of the assessment type, if set.
      - `owner` AssessmentOwner, required
        - `id` string, required — Unique identifier for the owner.
        - `type` 'USER' | 'TEAM', required
        - `displayName` string, nullable, required — Display name of the owner, if available.
        - `email` string, nullable, required — Email of the owner. Populated for USER owners, null for TEAM owners.
    - `pageInfo` PageInfo, required — Provides information about the pagination of a dataset.
      - `endCursor` string, nullable, required — The cursor that points to the end of the current page, or null if there is no such cursor.
      - `hasNextPage` boolean, required — Indicates if there is another page after the current page.
      - `hasPreviousPage` boolean, required — Indicates if there is a page before the current page.
      - `startCursor` string, nullable, required — The cursor that points to the start of the current page, or null if there is no such cursor.

---

[API](https://skmtc.net/vanta/apis/build-integrations.md) · [All operations](https://skmtc.net/vanta/apis/build-integrations/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vanta/build-integrations/revisions/6c1f7590538b/schema)