Update a penetration test finding status | Comp AI API
Triage or dispute a single penetration test finding. Marking one false_positive or wont_fix requires a justification note, recorded in the finding’s.
Authorizations
API key for authentication
Headers
Organization ID (required for session auth, optional for API key auth)
Body
New status for the finding. false_positive and wont_fix dispute the finding and require a justification note.
open, acknowledged, resolved, false_positive, wont_fix "false_positive"
Justification for the status change. REQUIRED, and at least 20 characters after trimming, when status is false_positive or wont_fix. Optional and unconstrained for the other statuses. Recorded in the finding's status history, written to the Comp audit log, and shared with the testing agent on future scans of the same target.
2000"This endpoint is internal-only and unreachable from the public internet — the scanner reached it through the staging bastion, which is not a production path."
Response
Updated finding returned

