---
title: API Findings
description: Triage detected API risks across definitions, gateways, and live traffic.
breadcrumbs: Docs > Datadog Security > App and API Protection > API Posture > API Findings
---

# API Findings

{% callout %}
# Important note for users on the following Datadog sites: app.ddog-gov.com, us2.ddog-gov.com

{% alert level="danger" %}
This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site.md). ({% placeholder "user-datadog-site-name" /%}).
{% /alert %}

{% /callout %}

The [API Findings](https://app.datadoghq.com/security/appsec/inventory/finding) explorer provides a central triage view of the API risks detected across your definitions, gateways, and live traffic. Default rules detect common vulnerabilities and misconfigurations. You can also add [custom rules](https://docs.datadoghq.com/security/application_security/policies/custom_rules.md) for specific use cases.

**API Findings** columns:

- **Severity:** Each issue is ranked by risk.
- **Endpoints:** Shows how many endpoints are affected and their services.
- **Status and Ticketing:** `Open` or `In Progress` tracks remediation progress and workflow integration.

Use the **Service** facet to see each service's endpoints to identify ownership and prioritize by business impact.

## Common operations{% #common-operations %}

Click a finding to view its details and perform a workflow such as Validate > Investigate > Fix > Track:

1. Validate:
   - Review What Happened and Detected In to confirm the detection is accurate (service, endpoint, method).
   - In Next Steps, choose whether to Mute, Create Ticket, or Run Workflow depending on ownership and impact.
1. Investigate:
   - Use the Context tab to examine the endpoint snapshot and attributes (method, path, authentication flags, tags).
   - Detected In provides information for routing ownership and remediation.
   - In Detection Rule Query, you can edit an API finding rule by clicking See Detection Rule.
1. Fix:
   - Follow the guidance under Remediation.
1. Track:
   - Use Create Ticket to link the issue to your tracking system.
   - Use Reference Links for developer education or code review.