List audit findings
curl --request GET \
--url https://api.trycomp.ai/v1/findings \
--header 'X-API-Key: <api-key>'const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('https://api.trycomp.ai/v1/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.trycomp.ai/v1/findings"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)[
{
"id": "fnd_abc123def456",
"organizationId": "org_abc123def456",
"type": "soc2",
"status": "open",
"severity": "medium",
"content": "Access review evidence is missing for Q3.",
"revisionNote": null,
"area": null,
"createdAt": "2026-01-01T00:00:00.000Z",
"updatedAt": "2026-01-15T00:00:00.000Z",
"taskId": "tsk_abc123def456",
"task": {
"id": "tsk_abc123def456",
"title": "Review access logs"
},
"evidenceSubmissionId": null,
"evidenceSubmission": null,
"evidenceFormType": null,
"policyId": null,
"vendorId": null,
"riskId": null,
"memberId": null,
"deviceId": null,
"templateId": null,
"createdById": "mem_abc123def456",
"createdByAdminId": null
}
]Findings
List audit findings | Comp AI API
List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.
GET
/
v1
/
findings
List audit findings
curl --request GET \
--url https://api.trycomp.ai/v1/findings \
--header 'X-API-Key: <api-key>'const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('https://api.trycomp.ai/v1/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.trycomp.ai/v1/findings"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)[
{
"id": "fnd_abc123def456",
"organizationId": "org_abc123def456",
"type": "soc2",
"status": "open",
"severity": "medium",
"content": "Access review evidence is missing for Q3.",
"revisionNote": null,
"area": null,
"createdAt": "2026-01-01T00:00:00.000Z",
"updatedAt": "2026-01-15T00:00:00.000Z",
"taskId": "tsk_abc123def456",
"task": {
"id": "tsk_abc123def456",
"title": "Review access logs"
},
"evidenceSubmissionId": null,
"evidenceSubmission": null,
"evidenceFormType": null,
"policyId": null,
"vendorId": null,
"riskId": null,
"memberId": null,
"deviceId": null,
"templateId": null,
"createdById": "mem_abc123def456",
"createdByAdminId": null
}
]Query Parameters
Response
200 - application/json
Findings retrieved successfully. Returned as a bare JSON array (no data envelope), ordered by status then newest first.
Available options:
board-meeting, it-leadership-meeting, risk-committee-meeting, meeting, access-request, whistleblower-report, penetration-test, rbac-matrix, infrastructure-inventory, employee-performance-evaluation, network-diagram, tabletop-exercise, account-types Was this page helpful?

