Results API

Maintained by: Aether365 Team Audience: Developers Scope: Results API endpoints - retrieving scan findings

Get Scan Results

Returns the individual check results for a completed scan.

GET /scans/{scanId}/results

Query Parameters

Parameter	Type	Description
page	integer	Page number (default: 1)
limit	integer	Results per page (default: 50, max: 200)
result	string	Filter: passed, failed, skipped
severity	string	Filter: critical, high, medium, low
framework	string	Filter by framework: cis, eidsca, cisa, nis2

Example Request

curl "https://api.aether365.io/scans/scan_abc123/results?result=failed&severity=critical" \
  -H "Authorization: Bearer <token>"

Example Response

{
  "success": true,
  "data": [
    {
      "id": "result_001",
      "scan_id": "scan_abc123",
      "test_id": "CIS.M365.1.1.1",
      "title": "Ensure multifactor authentication is enabled for all users in administrative roles",
      "result": "failed",
      "severity": "critical",
      "framework": "cis",
      "help_url": "https://www.cisecurity.org/benchmark/microsoft_365",
      "remediation_steps": "1. Sign in to the Azure portal...",
      "source_tool": "compliance"
    }
  ],
  "meta": {
    "total": 12,
    "page": 1,
    "limit": 50
  }
}

---

Get Single Result

Returns the detail of one individual check result.

GET /scans/{scanId}/results/{testId}

Example Request

curl https://api.aether365.io/scans/scan_abc123/results/CIS.M365.1.1.1 \
  -H "Authorization: Bearer <token>"

Example Response

{
  "success": true,
  "data": {
    "id": "result_001",
    "scan_id": "scan_abc123",
    "test_id": "CIS.M365.1.1.1",
    "title": "Ensure multifactor authentication is enabled for all users in administrative roles",
    "result": "failed",
    "severity": "critical",
    "framework": "cis",
    "help_url": "https://www.cisecurity.org/benchmark/microsoft_365",
    "remediation_steps": "1. Sign in to the Azure portal as a Global Administrator.\n2. Navigate to Microsoft Entra ID > Security > Conditional Access.\n3. Create or update a policy requiring MFA for all administrator roles.",
    "raw_output": {},
    "source_tool": "compliance"
  }
}

Field Reference

Field	Type	Description
test_id	string	Unique check identifier (e.g., CIS.M365.1.1.1)
title	string	Human-readable check name
result	string	passed, failed, or skipped
severity	string	critical, high, medium, or low
framework	string	Framework that defines this check (cis, eidsca, cisa, nis2)
help_url	string	Link to official documentation or benchmark reference
remediation_steps	string	Step-by-step fix instructions
source_tool	string	Scan engine type (compliance or exposure)
raw_output	object	Raw evaluation output (may be null for some checks)