Risk Library

Find library risks by search terms and filters

List all risks in library

🔒 Requires Risk Management: List Risks permission.

💎 Requires your account have the Risk Management Pro feature. Contact your CSM for help upgrading.

Securitybearer
Request
query Parameters
page
number >= 1
Default: 1

Which page of data are you requesting

limit
number [ 1 .. 50 ]
Default: 20

How many items are you requesting

sort
string

Which type of sort (default: ID)

Enum: "RISK_ID" "NAME"
Example: sort=ID
sortDir
string

Which direction to sort the data (default: ASC)

Enum: "ASC" "DESC"
Example: sortDir=ASC
q
string

Query to find a risks

categoriesIds
Array of numbers

List of categories ids to find risks by

Example: categoriesIds=1&categoriesIds=2&categoriesIds=3
riskFilter
string

Filter risks with a specific condition

Enum: "NEEDS_ATTENTION" "CUSTOM_ONLY" "INTERNAL_ONLY" "EXTERNAL_ONLY"
Example: riskFilter=NEEDS_ATTENTION
Responses
200
400

Malformed data and/or validation errors

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

412

You must accept the Drata terms and conditions to use the API

500

Internal server error

get/risk-library
Request samples 
Response samples 
application/json
{
  • "data": [
    • {
      • "id": 1,
      • "riskId": "AC-04",
      • "title": "Password Management - Password Cracking",
      • "description": "An attacker attempts to gain access to organizational information by guessing of passwords.",
      • "controls": [
        • {
          • "id": 23,
          • "code": "DCF-01",
          • "name": "Hello",
          • "description": "this is a description",
          • "isReady": true,
          • "controlNumber": 1,
          • "archivedAt": 1
          }
        ],
      • "categories": [
        • {
          • "id": 1,
          • "name": "Governance"
          }
        ]
      }
    ],
  • "page": 1,
  • "limit": 10,
  • "total": 100
}
Creates a copy of a risk from risk library to the risk register
Copy risks between library and register


🔒 Requires Risk Management: Create Risk permission.


💎 Requires your account have the Risk Management Pro feature. Contact your CSM for help upgrading.


Securitybearer 
Request 
Request Body schema: application/json
required
bulkActionType
required
string
The copy action to perform on from risk library to the risk module.


 Enum: "COPY_BY_IDS" "COPY_BY_GROUPS"  
risksIds
required
Array of strings  non-empty 
An array of the risks ids that you want to copy from risk library to the risk module.


 
riskGroups
required
Array of strings  non-empty 
An array of the risk groups that you want to copy from risk library to the risk module.


Items Enum: "WIZARD_CORE" "AI_DEVELOPMENT" "AI_USE" "PHYSICAL_SITE" "CLOUD_ENVIRONMENT" "UNSECURE_DEVICES" "DEVICE_DELIVERY" "SOFTWARE_DEVELOPMENT" "REGULATORY_REQUIREMENTS"  
Responses 
201
400
Malformed data and/or validation errors


401
Invalid Authorization


402
You must upgrade your plan to use this feature


403
You are not allowed to perform this action


412
You must accept the Drata terms and conditions to use the API


500
Internal server error


post/risk-library/copy
Request samples 
application/json
{
  • "bulkActionType": "COPY_BY_IDS",
  • "risksIds": [
    • "AA-01",
    • "AA-02",
    • "AA-03"
    ],
  • "riskGroups": [
    • "CLOUD_ENVIRONMENT"
    ]
}
Response samples 
application/json
{
  • "risks": [
    • {
      • "id": 1,
      • "riskId": "AC-04",
      • "title": "Password Management - Password Cracking",
      • "description": "An attacker attempts to gain access to organizational information by guessing of passwords.",
      • "treatmentPlan": "UNTREATED",
      • "treatmentDetails": "Building doors can be open and an unauthorized person can walk in.",
      • "anticipatedCompletionDate": "2025-07-01T16:45:55.246Z",
      • "completionDate": "2025-07-01T16:45:55.246Z",
      • "impact": 5,
      • "likelihood": 5,
      • "score": 5,
      • "residualImpact": 5,
      • "residualLikelihood": 5,
      • "residualScore": 5,
      • "applicable": true,
      • "status": "ACTIVE",
      • "controls": [
        • {
          • "id": 23,
          • "code": "DCF-01",
          • "name": "Hello",
          • "description": "this is a description",
          • "isReady": true,
          • "controlNumber": 1,
          • "archivedAt": 1
          }
        ],
      • "categories": [
        • {
          • "id": 1,
          • "name": "Governance"
          }
        ],
      • "owners": [],
      • "reviewers": [],
      • "documents": [
        • {
          • "id": 1,
          • "name": "Security Training",
          • "createdAt": "2025-07-01T16:45:55.246Z"
          }
        ],
      • "notes": [
        • {
          • "id": 1,
          • "comment": "Good comment",
          • "createdAt": "2025-07-01T16:45:55.246Z",
          • "updatedAt": "2025-07-01T16:45:55.246Z",
          • "owner": {
            • "id": 1,
            • "entryId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd",
            • "email": "[email protected]",
            • "firstName": "Sally",
            • "lastName": "Smith",
            • "jobTitle": "CEO",
            • "avatarUrl": "https://cdn-prod.imgpilot.com/avatar.png",
            • "drataTermsAgreedAt": "2025-07-01T16:45:55.246Z",
            • "createdAt": "2025-07-01T16:45:55.246Z",
            • "updatedAt": "2025-07-01T16:45:55.246Z"
            }
          }
        ]
      }
    ]
}
Get risk library details
Get a risk in the library by id


🔒 Requires Risk Management: Get Risk permission.


💎 Requires your account have the Risk Management Pro feature. Contact your CSM for help upgrading.


Securitybearer 
Request 
path Parameters
id
required
number
 
Responses 
200
Successful


400
Malformed data and/or validation errors


401
Invalid Authorization


402
You must upgrade your plan to use this feature


403
You are not allowed to perform this action


404
Not Found


412
You must accept the Drata terms and conditions to use the API


500
Internal server error


get/risk-library/{id}
Request samples 
Response samples 
application/json
{
  • "id": 1,
  • "riskId": "AC-04",
  • "title": "Password Management - Password Cracking",
  • "description": "An attacker attempts to gain access to organizational information by guessing of passwords.",
  • "controls": [
    • {
      • "id": 23,
      • "code": "DCF-01",
      • "name": "Hello",
      • "description": "this is a description",
      • "isReady": true,
      • "controlNumber": 1,
      • "archivedAt": 1
      }
    ],
  • "categories": [
    • {
      • "id": 1,
      • "name": "Governance"
      }
    ]
}