--- title: Retrieves Security Center Insights --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Security Center](https://developers.cloudflare.com/api/python/resources/security_center) [Insights](https://developers.cloudflare.com/api/python/resources/security_center/subresources/insights) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Retrieves Security Center Insights security\_center.insights.list(InsightListParams\*\*kwargs) -> SyncV4PagePagination\[Optional\[InsightListResponse]] GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights Lists all Security Center insights for the account or zone, showing security findings and recommendations. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### ParametersExpand Collapse account\_id: Optional\[str] The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>) zone\_id: Optional\[str] The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>) dismissed: Optional\[[bool]()] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20dismissed%20%3E%20(schema)>) issue\_class: Optional\[Sequence\[str]] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20issue_class%20%3E%20(schema)>) issue\_class\_neq: Optional\[Sequence\[str]] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20issue_class~neq%20%3E%20(schema)>)

issue\_type: Optional\[List\[IssueType]]

One of the following: "compliance\_violation" Link to this property "email\_security" Link to this property "exposed\_infrastructure" Link to this property "insecure\_configuration" Link to this property "weak\_authentication" Link to this property "configuration\_suggestion" Link to this property

[Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20issue_type%20%3E%20(schema)>)

issue\_type\_neq: Optional\[List\[IssueType]]

[Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20issue_type~neq%20%3E%20(schema)>) page: Optional\[int] Specifies the current page within paginated list of results. [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page%20%3E%20(schema)>) per\_page: Optional\[int] Sets the number of results per page of results. maximum1000 minimum1 [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20per_page%20%3E%20(schema)>) product: Optional\[Sequence\[str]] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20product%20%3E%20(schema)>) product\_neq: Optional\[Sequence\[str]] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20product~neq%20%3E%20(schema)>)

severity: Optional\[List\[SeverityQueryParam]]

One of the following: "low" Link to this property "moderate" Link to this property "critical" Link to this property

[Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20severity%20%3E%20(schema)>)

severity\_neq: Optional\[List\[SeverityQueryParam]]

One of the following: "low" Link to this property "moderate" Link to this property "critical" Link to this property

[Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20severity~neq%20%3E%20(schema)>)

source: Optional\[List\[Literal\["cloudflare", "riskrecon"]]]

One of the following: "cloudflare" Link to this property "riskrecon" Link to this property

[Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20source%20%3E%20(schema)>) subject: Optional\[Sequence\[str]] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20subject%20%3E%20(schema)>) subject\_neq: Optional\[Sequence\[str]] [Link to this property](<#(resource)%20security_center.insights%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20subject~neq%20%3E%20(schema)>) ##### ReturnsExpand Collapse

class InsightListResponse: …

count: Optional\[int] Indicates the total number of results. Link to this property

issues: Optional\[List\[Issue]]

id: Optional\[str] Link to this property dismissed: Optional\[bool] Link to this property has\_extended\_context: Optional\[bool] Indicates whether the insight has a large payload that requires fetching via the context endpoint. Link to this property issue\_class: Optional\[str] Link to this property

issue\_type: Optional\[IssueType]

Link to this property

payload: Optional\[IssuePayload]

detection\_method: Optional\[str] Describes the method used to detect insight. Link to this property zone\_tag: Optional\[str] Link to this property

Link to this property resolve\_link: Optional\[str] Link to this property resolve\_text: Optional\[str] Link to this property

severity: Optional\[Literal\["Low", "Moderate", "Critical"]]

One of the following: "Low" Link to this property "Moderate" Link to this property "Critical" Link to this property

Link to this property since: Optional\[datetime] formatdate-time Link to this property

status: Optional\[Literal\["active", "resolved"]] The current status of the insight.

One of the following: "active" Link to this property "resolved" Link to this property

Link to this property subject: Optional\[str] Link to this property timestamp: Optional\[datetime] formatdate-time Link to this property

user\_classification: Optional\[Literal\["false\_positive", "accept\_risk", "other"]] User-defined classification for the insight. Can be ‘false\_positive’, ‘accept\_risk’, ‘other’, or null.

One of the following: "false\_positive" Link to this property "accept\_risk" Link to this property "other" Link to this property

Link to this property

Link to this property page: Optional\[int] Specifies the current page within paginated list of results. Link to this property per\_page: Optional\[int] Sets the number of results per page of results. maximum1000 minimum1 Link to this property

[Link to this property](<#(resource)%20security_center.insights%20%3E%20(model)%20insight_list_response%20%3E%20(schema)>) ### Retrieves Security Center Insights Python HTTPTypeScriptPythonGoTerraform ``` import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) page = client.security_center.insights.list( account_id="account_id", ) page = page.result.items[0] print(page.count) ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "count": 1, "issues": [ { "id": "id", "dismissed": false, "has_extended_context": false, "issue_class": "always_use_https_not_enabled", "issue_type": "compliance_violation", "payload": { "detection_method": "We detected security rules referencing multiple IP addresses directly in the rules.", "zone_tag": "zone_tag" }, "resolve_link": "resolve_link", "resolve_text": "resolve_text", "severity": "Low", "since": "2019-12-27T18:11:19.117Z", "status": "active", "subject": "example.com", "timestamp": "2019-12-27T18:11:19.117Z", "user_classification": "false_positive" } ], "page": 1, "per_page": 25 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "count": 1, "issues": [ { "id": "id", "dismissed": false, "has_extended_context": false, "issue_class": "always_use_https_not_enabled", "issue_type": "compliance_violation", "payload": { "detection_method": "We detected security rules referencing multiple IP addresses directly in the rules.", "zone_tag": "zone_tag" }, "resolve_link": "resolve_link", "resolve_text": "resolve_text", "severity": "Low", "since": "2019-12-27T18:11:19.117Z", "status": "active", "subject": "example.com", "timestamp": "2019-12-27T18:11:19.117Z", "user_classification": "false_positive" } ], "page": 1, "per_page": 25 } } ```