Create audit finding
curl --request POST \
--url https://api.trycomp.ai/v1/findings \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"type": "soc2",
"content": "<string>"
}
'const options = {
method: 'POST',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({type: 'soc2', content: '<string>'})
};
fetch('https://api.trycomp.ai/v1/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.trycomp.ai/v1/findings"
payload = {
"type": "soc2",
"content": "<string>"
}
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)Findings
Create audit finding | Comp AI API
Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.
POST
/
v1
/
findings
Create audit finding
curl --request POST \
--url https://api.trycomp.ai/v1/findings \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"type": "soc2",
"content": "<string>"
}
'const options = {
method: 'POST',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({type: 'soc2', content: '<string>'})
};
fetch('https://api.trycomp.ai/v1/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.trycomp.ai/v1/findings"
payload = {
"type": "soc2",
"content": "<string>"
}
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)Authorizations
API key for authentication
Body
application/json
Framework this finding is attributed to (must match a framework the organization has enabled)
Available options:
soc2, iso27001, pci_dss, hipaa, gdpr, iso9001, iso42001 Finding content/message
Maximum string length:
5000Task ID
Evidence submission ID
Evidence form type
Available options:
board-meeting, it-leadership-meeting, risk-committee-meeting, meeting, access-request, whistleblower-report, penetration-test, rbac-matrix, infrastructure-inventory, employee-performance-evaluation, network-diagram, tabletop-exercise, account-types Policy ID
Vendor ID
Risk ID
Member ID (person this finding targets)
Device ID
Broad area when the finding is not tied to a specific item
Available options:
people, documents, compliance, risks, vendors, policies, other Severity
Available options:
low, medium, high, critical Response
201 - undefined
Was this page helpful?

