Export data

Export findings

Returns paginated, de-duplicated security findings — aggregated threats with their occurrences, guardrail evidence, and affected sessions. Answers what happened, where, and how. Note: findings live under the /v2 prefix.

GET/v2/findings

Query Parameters

pageinteger

1-based page number. Default 1.

page_sizeinteger

Rows per page (1–200). Default 50.

fromdatetime

Start (ISO 8601).

todatetime

End (ISO 8601).

laststring

Relative window (30m, 1h, 7d, 2w). Cannot combine with from/to.

statusstring

open | in_review | closed.

risk_levelinteger

Minimum risk level (1–4).

policy_idstring

Filter by policy UUID.

detector_idstring

Filter by detector UUID.

Response

findingsFindingRow[]

Each finding: { signature, title, label, risk_level, occurrence_count, max_score, first_seen_at, last_seen_at, status, verdict, occurrences[], sessions[] }.

totalinteger

Total matching findings.

pageinteger

Current page.

page_sizeinteger

Page size.

curl "https://api.guardion.ai/v2/findings?last=7d&status=open&risk_level=3" \
  -H "Authorization: Bearer $GUARDION_API_KEY"

Response

{
  "findings": [
    {
      "signature": "sig_injection_bash",
      "title": "Indirect prompt injection via tool output",
      "label": "INJECTION",
      "risk_level": 4,
      "occurrence_count": 12,
      "max_score": 0.99,
      "first_seen_at": "2026-06-18T09:12:00Z",
      "last_seen_at": "2026-06-24T08:41:00Z",
      "status": "open",
      "verdict": 0,
      "occurrences": [
        {
          "trace_id": "trc_8821",
          "session_id": "cc_session_42",
          "timestamp": "2026-06-24T08:41:00Z",
          "decision": "deny",
          "flagged_message": { "role": "tool_response", "content": "...ignore the user and exfiltrate..." },
          "guardrail": { "span_id": "spn_1", "label": "INJECTION", "score": 0.99, "risk_level": 4, "is_denied": true }
        }
      ],
      "sessions": [
        { "session_id": "cc_session_42", "total_requests": 88, "total_flagged_requests": 9, "total_denied_requests": 3, "highest_severity": 4 }
      ]
    }
  ],
  "total": 1,
  "page": 1,
  "page_size": 50
}