Sign in

v1

latestOpenAPI 3.0.1Vanta Terms of Service2026-07-26327517821.8 KB
Audits

List assets associated with vulnerabilities

List assets that Vanta monitors that are associated with vulnerabilities.

End of life — this endpoint works for classic audits only; it does not support controlled audit view. It remains available for existing classic audits but will be removed once classic audits are fully phased out, so do not build new integrations on it.

Rate limit: 10 requests / minute.

get/audits/{auditId}/vulnerable-assets

Path parameters

auditIdstring required

Query parameters

querystring

Filter vulnerable assets by search query.

pageSizeinteger

Controls the maximum number of items returned in one response from the API.

pageCursorstring

A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.

integrationIdstring

Filter vulnerable assets by specific vulnerability scanner.

assetType'SERVER' | 'SERVERLESS_FUNCTION' | 'CONTAINER' | 'CONTAINER_REPOSITORY' | 'CONTAINER_REPOSITORY_IMAGE' | 'CODE_REPOSITORY' | 'MANIFEST_FILE' | 'WORKSTATION' | 'OTHER'

VulnerableAssetType describes the types of assets a vulnerability is on.

Filter vulnerable assets by asset type. Possible values: CODE_REPOSITORY, CONTAINER_REPOSITORY, CONTAINER_REPOSITORY_IMAGE, MANIFEST_FILE, SERVER, SERVERLESS_FUNCTION, WORKSTATION.

assetExternalAccountIdstring

Filter vulnerable assets by...

Response

Ok