--- title: Cloudflare Managed Defense --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Cloudflare Managed Defense #### Cloudflare Managed DefenseVulnerability Discovery #### Cloudflare Managed DefenseVulnerability DiscoveryRepositories ##### [List repositories](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/repositories/methods/list) GET/accounts/{account\_id}/managed-defense/vulnerability-discovery/repos ##### [Create repository](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/repositories/methods/create) POST/accounts/{account\_id}/managed-defense/vulnerability-discovery/repos ##### [Get repository](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/repositories/methods/get) GET/accounts/{account\_id}/managed-defense/vulnerability-discovery/repos/{repo\_id} ##### ModelsExpand Collapse
RepositoryListResponse object {id, created\_at, name, 3 more } id: string formatuuid Link to this property created\_at: string formatdate-time Link to this property name: string maxLength255 minLength1 Link to this property
readiness: "awaiting\_source"or "processing"or "ready"or "failed" One of the following: "awaiting\_source" Link to this property "processing" Link to this property "ready" Link to this property "failed" Link to this property
Link to this property
source: "upload"or "worker" One of the following: "upload" Link to this property "worker" Link to this property
Link to this property
import\_error: optional object {code, message } code: "worker\_import\_failed" Link to this property message: "Worker import failed." Link to this property
Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.repositories%20%3E%20(model)%20repository_list_response%20%3E%20(schema)>)
RepositoryCreateResponse = object {repository, upload } or object {repository } One of the following:
object {repository, upload }
repository: object {id, name, readiness, 2 more } id: string formatuuid Link to this property name: string maxLength255 minLength1 Link to this property
readiness: "awaiting\_source"or "processing"or "ready"or "failed" One of the following: "awaiting\_source" Link to this property "processing" Link to this property "ready" Link to this property "failed" Link to this property
Link to this property
source: "upload"or "worker" One of the following: "upload" Link to this property "worker" Link to this property
Link to this property
import\_error: optional object {code, message } code: "worker\_import\_failed" Link to this property message: "Worker import failed." Link to this property
Link to this property
Link to this property
upload: object {token, expires\_in, remote } token: string maxLength8192 minLength1 Link to this property expires\_in: 3600 Link to this property remote: string formaturi maxLength2048 Link to this property
Link to this property
Link to this property
Repository object {repository }
repository: object {id, name, readiness, 2 more } id: string formatuuid Link to this property name: string maxLength255 minLength1 Link to this property
readiness: "awaiting\_source"or "processing"or "ready"or "failed" One of the following: "awaiting\_source" Link to this property "processing" Link to this property "ready" Link to this property "failed" Link to this property
Link to this property
source: "upload"or "worker" One of the following: "upload" Link to this property "worker" Link to this property
Link to this property
import\_error: optional object {code, message } code: "worker\_import\_failed" Link to this property message: "Worker import failed." Link to this property
Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.repositories%20%3E%20(model)%20repository_create_response%20%3E%20(schema)>)
RepositoryGetResponse object {repository, scans }
repository: object {id, created\_at, name, 3 more } id: string formatuuid Link to this property created\_at: string formatdate-time Link to this property name: string maxLength255 minLength1 Link to this property
readiness: "awaiting\_source"or "processing"or "ready"or "failed" One of the following: "awaiting\_source" Link to this property "processing" Link to this property "ready" Link to this property "failed" Link to this property
Link to this property
source: "upload"or "worker" One of the following: "upload" Link to this property "worker" Link to this property
Link to this property
import\_error: optional object {code, message } code: "worker\_import\_failed" Link to this property message: "Worker import failed." Link to this property
Link to this property
Link to this property
scans: array of object {id, completed\_at, message, 6 more } id: string formatuuid Link to this property completed\_at: string formatdate-time Link to this property message: string maxLength1024 Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
repositories: array of object {id, name, phase, 2 more } id: string formatuuid Link to this property name: string Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
report\_status: "not\_ready"or "pending\_review"or "published"or "withdrawn" One of the following: "not\_ready" Link to this property "pending\_review" Link to this property "published" Link to this property "withdrawn" Link to this property
Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property
Link to this property started\_at: string formatdate-time Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property submitted\_at: string formatdate-time Link to this property
telemetry\_window: optional object {end, start } UTC ISO-8601 interval. Start is inclusive, end is exclusive, and the interval must be positive and at most seven days. end: string formatdate-time Link to this property start: string formatdate-time Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.repositories%20%3E%20(model)%20repository_get_response%20%3E%20(schema)>) #### Cloudflare Managed DefenseVulnerability DiscoveryScans ##### [List scans](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/scans/methods/list) GET/accounts/{account\_id}/managed-defense/vulnerability-discovery/scans ##### [Create scan](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/scans/methods/create) POST/accounts/{account\_id}/managed-defense/vulnerability-discovery/scans ##### [Get scan](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/scans/methods/get) GET/accounts/{account\_id}/managed-defense/vulnerability-discovery/scans/{scan\_id} ##### [Get reviewed vulnerability report](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/scans/methods/get_report) GET/accounts/{account\_id}/managed-defense/vulnerability-discovery/scans/{scan\_id}/report ##### ModelsExpand Collapse
ScanListResponse object {id, completed\_at, message, 6 more } id: string formatuuid Link to this property completed\_at: string formatdate-time Link to this property message: string maxLength1024 Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
repositories: array of object {id, name, phase, 2 more } id: string formatuuid Link to this property name: string Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
report\_status: "not\_ready"or "pending\_review"or "published"or "withdrawn" One of the following: "not\_ready" Link to this property "pending\_review" Link to this property "published" Link to this property "withdrawn" Link to this property
Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property
Link to this property started\_at: string formatdate-time Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property submitted\_at: string formatdate-time Link to this property
telemetry\_window: optional object {end, start } UTC ISO-8601 interval. Start is inclusive, end is exclusive, and the interval must be positive and at most seven days. end: string formatdate-time Link to this property start: string formatdate-time Link to this property
Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.scans%20%3E%20(model)%20scan_list_response%20%3E%20(schema)>)
ScanCreateResponse object {id, completed\_at, message, 6 more } id: string formatuuid Link to this property completed\_at: string formatdate-time Link to this property message: string maxLength1024 Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
repositories: array of object {id, name, phase, 2 more } id: string formatuuid Link to this property name: string Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
report\_status: "not\_ready"or "pending\_review"or "published"or "withdrawn" One of the following: "not\_ready" Link to this property "pending\_review" Link to this property "published" Link to this property "withdrawn" Link to this property
Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property
Link to this property started\_at: string formatdate-time Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property submitted\_at: string formatdate-time Link to this property
telemetry\_window: optional object {end, start } UTC ISO-8601 interval. Start is inclusive, end is exclusive, and the interval must be positive and at most seven days. end: string formatdate-time Link to this property start: string formatdate-time Link to this property
Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.scans%20%3E%20(model)%20scan_create_response%20%3E%20(schema)>)
ScanGetResponse object {id, completed\_at, message, 6 more } id: string formatuuid Link to this property completed\_at: string formatdate-time Link to this property message: string maxLength1024 Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
repositories: array of object {id, name, phase, 2 more } id: string formatuuid Link to this property name: string Link to this property
phase: "provisioning"or "indexing"or "analyzing"or 2 more One of the following: "provisioning" Link to this property "indexing" Link to this property "analyzing" Link to this property "reporting" Link to this property "finalizing" Link to this property
Link to this property
report\_status: "not\_ready"or "pending\_review"or "published"or "withdrawn" One of the following: "not\_ready" Link to this property "pending\_review" Link to this property "published" Link to this property "withdrawn" Link to this property
Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property
Link to this property started\_at: string formatdate-time Link to this property
status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property submitted\_at: string formatdate-time Link to this property
telemetry\_window: optional object {end, start } UTC ISO-8601 interval. Start is inclusive, end is exclusive, and the interval must be positive and at most seven days. end: string formatdate-time Link to this property start: string formatdate-time Link to this property
Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.scans%20%3E%20(model)%20scan_get_response%20%3E%20(schema)>)
ScanGetReportResponse object {publication, report, repositories, scan\_id }
publication: object {published\_at, revision\_id, version } published\_at: string formatdate-time Link to this property revision\_id: string formatuuid Link to this property version: number minimum1 Link to this property
Link to this property
report: object {executive\_summary, generated\_at, overall\_severity, 3 more } executive\_summary: string maxLength10000 minLength1 Link to this property generated\_at: string Revision requests must echo the existing generation timestamp unchanged. formatdate-time Link to this property
overall\_severity: "critical"or "high"or "medium"or 2 more One of the following: "critical" Link to this property "high" Link to this property "medium" Link to this property "low" Link to this property "info" Link to this property
Link to this property
repositories: array of object {findings, overall\_severity, repository\_id, 5 more }
findings: array of object {id, conditions, cwe, 17 more } id: string maxLength128 minLength1 Link to this property conditions: array of string Link to this property cwe: string minLength1 Link to this property impact: string maxLength4000 minLength1 Link to this property
location: object {file, line, route } file: string minLength1 Link to this property line: number minimum1 Link to this property route: string Link to this property
Link to this property
reachability: array of object {consumer, reachable, via } consumer: string minLength1 Link to this property reachable: boolean Link to this property via: string Link to this property
Link to this property
remediation: object {code\_changes, strategy } code\_changes: string Link to this property strategy: string minLength1 Link to this property
Link to this property root\_cause: string maxLength4000 minLength1 Link to this property
severity: "critical"or "high"or "medium"or 2 more One of the following: "critical" Link to this property "high" Link to this property "medium" Link to this property "low" Link to this property "info" Link to this property
Link to this property severity\_basis: string minLength1 Link to this property summary: string maxLength4000 minLength1 Link to this property
telemetry: object {references, state } references: array of string Link to this property
state: "no\_route"or "no\_telemetry"or "no\_match"or "matched" One of the following: "no\_route" Link to this property "no\_telemetry" Link to this property "no\_match" Link to this property "matched" Link to this property
Link to this property
Link to this property title: string maxLength200 minLength1 Link to this property
trace: array of object {line, path, scope, why } line: number minimum1 Link to this property path: string minLength1 Link to this property scope: string Link to this property why: string Link to this property
Link to this property
waf\_rules: object {broad, targeted }
broad: object {action, confidence, description, 4 more }
action: "block"or "managed\_challenge"or "js\_challenge"or "log" One of the following: "block" Link to this property "managed\_challenge" Link to this property "js\_challenge" Link to this property "log" Link to this property
Link to this property
confidence: "low"or "medium"or "high" One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property
Link to this property description: string minLength1 Link to this property expression: string maxLength4096 minLength1 Link to this property false\_positive\_risk: string minLength1 Link to this property name: string maxLength25 minLength1 Link to this property rationale: string minLength1 Link to this property
Link to this property
targeted: object {action, confidence, description, 4 more }
action: "block"or "managed\_challenge"or "js\_challenge"or "log" One of the following: "block" Link to this property "managed\_challenge" Link to this property "js\_challenge" Link to this property "log" Link to this property
Link to this property
confidence: "low"or "medium"or "high" One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property
Link to this property description: string minLength1 Link to this property expression: string maxLength4096 minLength1 Link to this property false\_positive\_risk: string minLength1 Link to this property name: string maxLength25 minLength1 Link to this property rationale: string minLength1 Link to this property
Link to this property
Link to this property
attacker\_position: optional "external"or "authenticated"or "internal"or "post\_compromise" Least-privileged position required to trigger the finding. Optional on legacy report revisions. One of the following: "external" Link to this property "authenticated" Link to this property "internal" Link to this property "post\_compromise" Link to this property
Link to this property
external\_links: optional array of object {title, url } title: string maxLength200 minLength1 Link to this property url: string formaturi maxLength2048 Link to this property
Link to this property open\_question: optional string One bounded unresolved proof question. Optional on legacy report revisions. maxLength500 Link to this property
proof\_method: optional "structural"or "experimental"or "acquired\_source"or 2 more Method used or needed to close the proof. Optional on legacy report revisions. One of the following: "structural" Link to this property "experimental" Link to this property "acquired\_source" Link to this property "public\_knowledge" Link to this property "team\_question" Link to this property
Link to this property
proof\_state: optional "closed"or "pending\_source"or "pending\_public"or 2 more Current proof lifecycle state. Optional on legacy report revisions. One of the following: "closed" Link to this property "pending\_source" Link to this property "pending\_public" Link to this property "pending\_experiment" Link to this property "pending\_team" Link to this property
Link to this property
Link to this property
overall\_severity: "critical"or "high"or "medium"or 2 more One of the following: "critical" Link to this property "high" Link to this property "medium" Link to this property "low" Link to this property "info" Link to this property
Link to this property repository\_id: string formatuuid Link to this property repository\_name: string minLength1 Link to this property summary: string maxLength4000 minLength1 Link to this property
traffic\_context: object {http, target, waf, web\_assets }
http: object {error\_paths, hot\_paths, request\_volume }
error\_paths: array of object {id, hits, host, 2 more } id: string minLength1 Link to this property hits: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property status: number maximum599 minimum100 Link to this property
Link to this property
hot\_paths: array of object {id, hits, host, 2 more } id: string minLength1 Link to this property hits: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property top\_status: number maximum599 minimum100 Link to this property
Link to this property request\_volume: number minimum0 Link to this property
Link to this property
target: object {hosts, kind, telemetry\_window } hosts: array of string Link to this property
kind: "worker"or "origin" One of the following: "worker" Link to this property "origin" Link to this property
Link to this property
telemetry\_window: optional object {end, start } UTC ISO-8601 interval. Start is inclusive, end is exclusive, and the interval must be positive and at most seven days. end: string formatdate-time Link to this property start: string formatdate-time Link to this property
Link to this property
Link to this property
waf: object {hit\_volume, rules } hit\_volume: number minimum0 Link to this property
rules: array of object {id, hit\_volume, paths, 2 more } id: string minLength1 Link to this property hit\_volume: number minimum0 Link to this property
paths: array of object {id, hit\_volume, host, path } id: string minLength1 Link to this property hit\_volume: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property
Link to this property rule\_id: string minLength1 Link to this property rule\_version: number minimum0 Link to this property
Link to this property
Link to this property
web\_assets: object {operations, paths, risk\_types }
operations: array of object {id, endpoint, host, 3 more } id: string minLength1 Link to this property endpoint: string minLength1 Link to this property host: string minLength1 Link to this property method: string minLength1 Link to this property
risk\_labels: array of object {description, name } description: string Link to this property name: string minLength1 Link to this property
Link to this property
performance: optional object {avg\_origin\_latency\_ms, error\_rate, estimated\_requests } avg\_origin\_latency\_ms: number minimum0 Link to this property error\_rate: number maximum1 minimum0 Link to this property estimated\_requests: number minimum0 Link to this property
Link to this property
Link to this property
paths: array of object {id, avg\_origin\_latency\_ms, error\_rate, 3 more } id: string minLength1 Link to this property avg\_origin\_latency\_ms: number minimum0 Link to this property error\_rate: number maximum1 minimum0 Link to this property estimated\_requests: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property
Link to this property
risk\_types: array of object {description, name, operation\_count } description: string Link to this property name: string minLength1 Link to this property operation\_count: number minimum0 Link to this property
Link to this property
Link to this property
Link to this property
external\_links: optional array of object {title, url } title: string maxLength200 minLength1 Link to this property url: string formaturi maxLength2048 Link to this property
Link to this property limitations: optional array of string Link to this property
Link to this property schema\_version: 2 Link to this property title: string maxLength200 minLength1 Link to this property
Link to this property
repositories: array of object {id, name, report\_status, scan\_status } id: string formatuuid Link to this property name: string Link to this property
report\_status: "not\_ready"or "pending\_review"or "published"or "withdrawn" One of the following: "not\_ready" Link to this property "pending\_review" Link to this property "published" Link to this property "withdrawn" Link to this property
Link to this property
scan\_status: "requested"or "accepted"or "running"or 4 more One of the following: "requested" Link to this property "accepted" Link to this property "running" Link to this property "completed" Link to this property "failed" Link to this property "rejected" Link to this property "cancelled" Link to this property
Link to this property
Link to this property scan\_id: string formatuuid Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.scans%20%3E%20(model)%20scan_get_report_response%20%3E%20(schema)>) #### Cloudflare Managed DefenseVulnerability DiscoveryReports ##### [Get reviewed vulnerability report](https://developers.cloudflare.com/api/resources/managed_defense/subresources/vulnerability_discovery/subresources/reports/methods/get) GET/accounts/{account\_id}/managed-defense/vulnerability-discovery/repos/{repo\_id}/scans/{scan\_id}/report ##### ModelsExpand Collapse
ReportGetResponse object {publication, report, repository\_id, scan\_id }
publication: object {published\_at, revision\_id, version } published\_at: string formatdate-time Link to this property revision\_id: string formatuuid Link to this property version: number minimum1 Link to this property
Link to this property
report: object {findings, overall\_severity, repository\_id, 5 more }
findings: array of object {id, conditions, cwe, 17 more } id: string maxLength128 minLength1 Link to this property conditions: array of string Link to this property cwe: string minLength1 Link to this property impact: string maxLength4000 minLength1 Link to this property
location: object {file, line, route } file: string minLength1 Link to this property line: number minimum1 Link to this property route: string Link to this property
Link to this property
reachability: array of object {consumer, reachable, via } consumer: string minLength1 Link to this property reachable: boolean Link to this property via: string Link to this property
Link to this property
remediation: object {code\_changes, strategy } code\_changes: string Link to this property strategy: string minLength1 Link to this property
Link to this property root\_cause: string maxLength4000 minLength1 Link to this property
severity: "critical"or "high"or "medium"or 2 more One of the following: "critical" Link to this property "high" Link to this property "medium" Link to this property "low" Link to this property "info" Link to this property
Link to this property severity\_basis: string minLength1 Link to this property summary: string maxLength4000 minLength1 Link to this property
telemetry: object {references, state } references: array of string Link to this property
state: "no\_route"or "no\_telemetry"or "no\_match"or "matched" One of the following: "no\_route" Link to this property "no\_telemetry" Link to this property "no\_match" Link to this property "matched" Link to this property
Link to this property
Link to this property title: string maxLength200 minLength1 Link to this property
trace: array of object {line, path, scope, why } line: number minimum1 Link to this property path: string minLength1 Link to this property scope: string Link to this property why: string Link to this property
Link to this property
waf\_rules: object {broad, targeted }
broad: object {action, confidence, description, 4 more }
action: "block"or "managed\_challenge"or "js\_challenge"or "log" One of the following: "block" Link to this property "managed\_challenge" Link to this property "js\_challenge" Link to this property "log" Link to this property
Link to this property
confidence: "low"or "medium"or "high" One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property
Link to this property description: string minLength1 Link to this property expression: string maxLength4096 minLength1 Link to this property false\_positive\_risk: string minLength1 Link to this property name: string maxLength25 minLength1 Link to this property rationale: string minLength1 Link to this property
Link to this property
targeted: object {action, confidence, description, 4 more }
action: "block"or "managed\_challenge"or "js\_challenge"or "log" One of the following: "block" Link to this property "managed\_challenge" Link to this property "js\_challenge" Link to this property "log" Link to this property
Link to this property
confidence: "low"or "medium"or "high" One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property
Link to this property description: string minLength1 Link to this property expression: string maxLength4096 minLength1 Link to this property false\_positive\_risk: string minLength1 Link to this property name: string maxLength25 minLength1 Link to this property rationale: string minLength1 Link to this property
Link to this property
Link to this property
attacker\_position: optional "external"or "authenticated"or "internal"or "post\_compromise" Least-privileged position required to trigger the finding. Optional on legacy report revisions. One of the following: "external" Link to this property "authenticated" Link to this property "internal" Link to this property "post\_compromise" Link to this property
Link to this property
external\_links: optional array of object {title, url } title: string maxLength200 minLength1 Link to this property url: string formaturi maxLength2048 Link to this property
Link to this property open\_question: optional string One bounded unresolved proof question. Optional on legacy report revisions. maxLength500 Link to this property
proof\_method: optional "structural"or "experimental"or "acquired\_source"or 2 more Method used or needed to close the proof. Optional on legacy report revisions. One of the following: "structural" Link to this property "experimental" Link to this property "acquired\_source" Link to this property "public\_knowledge" Link to this property "team\_question" Link to this property
Link to this property
proof\_state: optional "closed"or "pending\_source"or "pending\_public"or 2 more Current proof lifecycle state. Optional on legacy report revisions. One of the following: "closed" Link to this property "pending\_source" Link to this property "pending\_public" Link to this property "pending\_experiment" Link to this property "pending\_team" Link to this property
Link to this property
Link to this property
overall\_severity: "critical"or "high"or "medium"or 2 more One of the following: "critical" Link to this property "high" Link to this property "medium" Link to this property "low" Link to this property "info" Link to this property
Link to this property repository\_id: string formatuuid Link to this property repository\_name: string minLength1 Link to this property summary: string maxLength4000 minLength1 Link to this property
traffic\_context: object {http, target, waf, web\_assets }
http: object {error\_paths, hot\_paths, request\_volume }
error\_paths: array of object {id, hits, host, 2 more } id: string minLength1 Link to this property hits: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property status: number maximum599 minimum100 Link to this property
Link to this property
hot\_paths: array of object {id, hits, host, 2 more } id: string minLength1 Link to this property hits: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property top\_status: number maximum599 minimum100 Link to this property
Link to this property request\_volume: number minimum0 Link to this property
Link to this property
target: object {hosts, kind, telemetry\_window } hosts: array of string Link to this property
kind: "worker"or "origin" One of the following: "worker" Link to this property "origin" Link to this property
Link to this property
telemetry\_window: optional object {end, start } UTC ISO-8601 interval. Start is inclusive, end is exclusive, and the interval must be positive and at most seven days. end: string formatdate-time Link to this property start: string formatdate-time Link to this property
Link to this property
Link to this property
waf: object {hit\_volume, rules } hit\_volume: number minimum0 Link to this property
rules: array of object {id, hit\_volume, paths, 2 more } id: string minLength1 Link to this property hit\_volume: number minimum0 Link to this property
paths: array of object {id, hit\_volume, host, path } id: string minLength1 Link to this property hit\_volume: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property
Link to this property rule\_id: string minLength1 Link to this property rule\_version: number minimum0 Link to this property
Link to this property
Link to this property
web\_assets: object {operations, paths, risk\_types }
operations: array of object {id, endpoint, host, 3 more } id: string minLength1 Link to this property endpoint: string minLength1 Link to this property host: string minLength1 Link to this property method: string minLength1 Link to this property
risk\_labels: array of object {description, name } description: string Link to this property name: string minLength1 Link to this property
Link to this property
performance: optional object {avg\_origin\_latency\_ms, error\_rate, estimated\_requests } avg\_origin\_latency\_ms: number minimum0 Link to this property error\_rate: number maximum1 minimum0 Link to this property estimated\_requests: number minimum0 Link to this property
Link to this property
Link to this property
paths: array of object {id, avg\_origin\_latency\_ms, error\_rate, 3 more } id: string minLength1 Link to this property avg\_origin\_latency\_ms: number minimum0 Link to this property error\_rate: number maximum1 minimum0 Link to this property estimated\_requests: number minimum0 Link to this property host: string minLength1 Link to this property path: string minLength1 Link to this property
Link to this property
risk\_types: array of object {description, name, operation\_count } description: string Link to this property name: string minLength1 Link to this property operation\_count: number minimum0 Link to this property
Link to this property
Link to this property
Link to this property
external\_links: optional array of object {title, url } title: string maxLength200 minLength1 Link to this property url: string formaturi maxLength2048 Link to this property
Link to this property limitations: optional array of string Link to this property
Link to this property repository\_id: string formatuuid Link to this property scan\_id: string maxLength128 minLength1 Link to this property
[Link to this property](<#(resource)%20managed_defense.vulnerability_discovery.reports%20%3E%20(model)%20report_get_response%20%3E%20(schema)>)