Retrieve a finding

Request

Security

x-api-key

Path

idstringrequired

Unique identifier for the finding

GET

/v1/findings/{id}

curl -i -X GET \
  'https://api.pushsecurity.com/v1/findings/{id}' \
  -H 'x-api-key: YOUR_API_KEY_HERE'

Responses

Headers

any

Bodyapplication/json

idstring

Unique identifier for the finding

Example:"d6a32ba5-0532-4a66-8137-48cdf409c972"

typestring(FindingType)

The type of finding

Enum Value	Description
MFA_NOT_REGISTERED	This account does not have MFA.
REUSED_PASSWORD	The password used on the account is being reused.
SHARED_ACCOUNT	The account credentials are being shared with another employee.
UNUSED_THIRD_PARTY_APP	Deprecated; no longer in use but still accepted for compatibility.
WEAK_PASSWORD	The password used on the account is weak.
LEAKED_PASSWORD	The password used on the account has been leaked in a data breach.
PASSWORD_MANAGER_NOT_USED	The employee typically uses manually typed passwords, rather than a password manager.
STOLEN_CREDENTIALS	The credentials used on the account have been identified as stolen.

statestring(FindingState)

The state of the finding

Enum Value	Description
OPEN	The finding has been confirmed and is open.
RESOLVED	The finding has been resolved and is no longer an issue.

employeeIdstring or null

ID of the employee this finding is linked to, null if finding is not linked to an employee.

Example:"379ac7ea-ff2a-42ef-af37-06d2020dc46a"

passwordIdstring or null

ID of the password this finding is linked to, null if finding is not linked to a password.

Example:"c4a045a1-5331-4714-af83-6a361e98960d"

accountIdstring or null

ID of the account this finding is linked to, null if finding is not linked to an account.

appTypestring or null

The type of app this finding is linked to, null if finding is not linked to an app.

Example:"PUSH_SECURITY"

appIdstring or null

ID of the app this finding is linked to, null if finding is not linked to an app.

Example:"2a2197de-ad2c-47e4-8dcb-fb0f04cf83e0"

weakPasswordReasonsArray of strings or null

Reasons a password is weak, null if not a WEAK_PASSWORD finding.

creationTimestampinteger

When this finding was first observed, formatted as a UNIX timestamp (in seconds)

Example:1698064423

Response

{
  "id": "d6a32ba5-0532-4a66-8137-48cdf409c972",
  "type": "MFA_NOT_REGISTERED",
  "state": "OPEN",
  "employeeId": "379ac7ea-ff2a-42ef-af37-06d2020dc46a",
  "passwordId": "c4a045a1-5331-4714-af83-6a361e98960d",
  "accountId": "string",
  "appType": "PUSH_SECURITY",
  "appId": "2a2197de-ad2c-47e4-8dcb-fb0f04cf83e0",
  "weakPasswordReasons": [
    "COMMON_BASE_WORD"
  ],
  "creationTimestamp": 1698064423
}