{
  "opencollection": "1.0.0",
  "info": {
    "name": "Conduct an audit",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Audits",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "List audits",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits",
            "params": [
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "changedSinceDate",
                "value": "",
                "type": "query",
                "description": "Includes all audits that have changed since changedSinceDate."
              },
              {
                "name": "isActiveAudit",
                "value": "",
                "type": "query",
                "description": "Includes only audits with no audit report uploaded"
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a paginated list of audits scoped to the audit firm."
        },
        {
          "info": {
            "name": "List of vendors who are in scope for this audit",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/vendors",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a list of vendors who are in scope for this audit."
        },
        {
          "info": {
            "name": "List monitored computers",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/monitored-computers",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "complianceStatusFilterMatchesAny",
                "value": "",
                "type": "query",
                "description": "Filters for monitored computers matching any status declared in the filter."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a list of computers monitored by an MDM (with an integration built\nby Vanta) or by the Vanta Agent. Currently this list does not include\nresources from partner or customer-built integrations."
        },
        {
          "info": {
            "name": "List audit evidence url",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/evidence/:auditEvidenceId/urls",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "auditEvidenceId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a paginated list of evidence urls for an audit. This endpoint should be called whenever an\nevidence is created or has a statusUpdatedAt field that is more recent than the most recent polling event."
        },
        {
          "info": {
            "name": "List of people who are in scope for this audit",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/people",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "tasksSummaryStatusMatchesAny",
                "value": "",
                "type": "query",
                "description": "Filter individuals by those whose tasksSummary status is any of the provided values."
              },
              {
                "name": "taskTypeMatchesAny",
                "value": "",
                "type": "query",
                "description": "Requires taskStatusMatchesAny. Includes all people for whom any of the provided taskType values in taskTypeMatchesAny\nis any of the provided taskStatus values in taskStatusMatchesAny."
              },
              {
                "name": "taskStatusMatchesAny",
                "value": "",
                "type": "query",
                "description": "Requires taskTypeMatchesAny. Includes all people for whom any of the provided taskType values in taskTypeMatchesAny\nis any of the provided taskStatus values in taskStatusMatchesAny."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a list of people who are in scope for this audit."
        },
        {
          "info": {
            "name": "List vulnerability remediations that are in scope for this audit",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/vulnerability-remediations",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "integrationId",
                "value": "",
                "type": "query",
                "description": "Filter vulnerability remediations based on a specific scanner integration."
              },
              {
                "name": "severity",
                "value": "",
                "type": "query",
                "description": "Filter vulnerability remediations by severity.\nPossible values: CRITICAL, HIGH, MEDIUM, LOW."
              },
              {
                "name": "isRemediatedOnTime",
                "value": "",
                "type": "query",
                "description": "Filter vulnerability remediations by remediation status."
              },
              {
                "name": "remediatedAfterDate",
                "value": "",
                "type": "query",
                "description": "Filter vulnerability remediations that occurred after a specific timestamp."
              },
              {
                "name": "remediatedBeforeDate",
                "value": "",
                "type": "query",
                "description": "Filter vulnerability remediations that occurred before a specific timestamp."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "List all vulnerability remediations based on selected filters that are in scope for this audit."
        },
        {
          "info": {
            "name": "List audit evidence",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/evidence",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "changedSinceDate",
                "value": "",
                "type": "query",
                "description": "Includes all audit evidence that have changed since changedSinceDate."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a paginated list of evidence for an audit."
        },
        {
          "info": {
            "name": "List audit comments",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/comments",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "changedSinceDate",
                "value": "",
                "type": "query",
                "description": "Includes all comments that have changed since changedSinceDate."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a paginated list of comments for an audit."
        },
        {
          "info": {
            "name": "List audit controls",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/controls",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Returns a paginated list of controls for an audit."
        },
        {
          "info": {
            "name": "Create a comment for audit evidence",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.vanta.com/v1/audits/:auditId/evidence/:auditEvidenceId/comments",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "auditEvidenceId",
                "value": "",
                "type": "path"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Create a comment in Vanta for a piece of evidence."
        },
        {
          "info": {
            "name": "Update audit evidence",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "https://api.vanta.com/v1/audits/:auditId/evidence/:auditEvidenceId",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "auditEvidenceId",
                "value": "",
                "type": "path"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Update audit evidence."
        },
        {
          "info": {
            "name": "Create a custom evidence request for an audit",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.vanta.com/v1/audits/:auditId/evidence/custom-evidence-requests",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Create a custom evidence request for an audit."
        },
        {
          "info": {
            "name": "Create a custom control for an audit",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.vanta.com/v1/audits/:auditId/controls/custom-controls",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Create a custom control for an audit."
        },
        {
          "info": {
            "name": "List vulnerabilities within the scope of a given audit",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/vulnerabilities",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "query",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities by search query"
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "isDeactivated",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities by deactivation status."
              },
              {
                "name": "externalVulnerabilityId",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities based on a specific external ID."
              },
              {
                "name": "isFixAvailable",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities that have an available fix."
              },
              {
                "name": "packageIdentifier",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities that are from a specific package."
              },
              {
                "name": "slaDeadlineAfterDate",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities with a fix due after a specific timestamp"
              },
              {
                "name": "slaDeadlineBeforeDate",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities with a fix due before a specific timestamp"
              },
              {
                "name": "severity",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities by severity.\nPossible values: CRITICAL, HIGH, MEDIUM, LOW."
              },
              {
                "name": "integrationId",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities by the vulnerability scanner that detected them."
              },
              {
                "name": "includeVulnerabilitiesWithoutSlas",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities without an SLA due date."
              },
              {
                "name": "vulnerableAssetId",
                "value": "",
                "type": "query",
                "description": "Filter vulnerabilities by a specific asset ID."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "List all vulnerabilities based on selected filters."
        },
        {
          "info": {
            "name": "List assets associated with vulnerabilities",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.vanta.com/v1/audits/:auditId/vulnerable-assets",
            "params": [
              {
                "name": "auditId",
                "value": "",
                "type": "path"
              },
              {
                "name": "query",
                "value": "",
                "type": "query",
                "description": "Filter vulnerable assets by search query."
              },
              {
                "name": "pageSize",
                "value": "",
                "type": "query"
              },
              {
                "name": "pageCursor",
                "value": "",
                "type": "query"
              },
              {
                "name": "integrationId",
                "value": "",
                "type": "query",
                "description": "Filter vulnerable assets by specific vulnerability scanner."
              },
              {
                "name": "assetType",
                "value": "",
                "type": "query",
                "description": "Filter vulnerable assets by asset type.\nPossible values: CODE_REPOSITORY, CONTAINER_REPOSITORY, CONTAINER_REPOSITORY_IMAGE, MANIFEST_FILE, SERVER, SERVERLESS_FUNCTION, WORKSTATION."
              },
              {
                "name": "assetExternalAccountId",
                "value": "",
                "type": "query",
                "description": "Filter vulnerable assets by..."
              }
            ],
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "List assets that Vanta monitors that are associated with vulnerabilities."
        }
      ]
    },
    {
      "info": {
        "name": "Auditors",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Create an auditor",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.vanta.com/v1/auditors",
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Create an auditor in Vanta."
        }
      ]
    }
  ],
  "bundled": true
}