> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/api-documentation/api-reference/api--response-center/types/objects/incident.md).

# incident

### Examples

```graphql
type Incident {
  id: String!
  caseId: String!
  name: String!
  description: String
  type: IncidentType!
  severity: IncidentSeverity!
  status: IncidentStatus!
  blockedReason: String
  owner: String
  creator: String!
  slaTargetAt: DateTime
  settings: IncidentSettings!
  isOxDeclared: Boolean!
  autoExpandFromSource: Boolean!
  externalReferences: [String!]!
  sourcePublishedAt: DateTime
  counts: IncidentCounts!
  exposureState: ExposureState
  currentSeverity: IncidentSeverity
  isMonitoring: Boolean!
  affectedResourceCount: Int!
  summary: [IncidentSummarySection!]!
  aiSummary: IncidentAiSummary
  indicatorCounts: IncidentIndicatorCounts
  countsAsOf: DateTime
  lastMatchedAt: DateTime
  lastExposureChange: DateTime
  resolvedAt: DateTime
  createdAt: DateTime
  updatedAt: DateTime
  indicators: [Indicator!]
}
```

### Fields

| Field                                                                                                                                         | Description | Supported fields                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| --------------------------------------------------------------------------------------------------------------------------------------------- | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| id `String!`                                                                                                                                  |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| caseId `String!`                                                                                                                              |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| name `String!`                                                                                                                                |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| description `String`                                                                                                                          |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| type [`IncidentType!`](/api-documentation/api-reference/api--response-center/types/enums/incident-type.md)                                    |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| severity [`IncidentSeverity!`](/api-documentation/api-reference/api--response-center/types/enums/incident-severity.md)                        |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| status [`IncidentStatus!`](/api-documentation/api-reference/api--response-center/types/enums/incident-status.md)                              |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| blockedReason `String`                                                                                                                        |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| owner `String`                                                                                                                                |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| creator `String!`                                                                                                                             |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| slaTargetAt `DateTime`                                                                                                                        |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| settings [`IncidentSettings!`](/api-documentation/api-reference/api--response-center/types/objects/incident-settings.md)                      |             | <p>allowManualClosure <code>Boolean!</code><br>autoCloseWhenResolved <code>Boolean!</code><br>cleanDaysBeforeClose <code>Int!</code><br>autoReopenOnNewHit <code>Boolean!</code><br>watchWindowDays <code>Int!</code></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| isOxDeclared `Boolean!`                                                                                                                       |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| autoExpandFromSource `Boolean!`                                                                                                               |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| externalReferences `[String!]!`                                                                                                               |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| sourcePublishedAt `DateTime`                                                                                                                  |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| counts [`IncidentCounts!`](/api-documentation/api-reference/api--response-center/types/objects/incident-counts.md)                            |             | <p>affectedApps <code>Int!</code><br>affectedRepos <code>Int!</code><br>affectedImages <code>Int!</code><br>openFindings <code>Int!</code><br>resolvedFindings <code>Int!</code><br>sbomMatches <code>Int!</code><br>pipelineHits <code>Int!</code><br>clearedMatches <code>Int!</code><br>blockedItems <code>Int!</code><br>cloudAccounts <code>Int!</code><br>cloudRunningImages <code>Int!</code><br>cloudRunningThisVersionImages <code>Int!</code><br>openFindingsBySeverity <a href="/pages/JMrNDHyY34tBVqBlfkaS"><code>IncidentSeverityCounts!</code></a></p>                                                                                                                                                                                                                    |
| exposureState [`ExposureState`](/api-documentation/api-reference/api--response-center/types/enums/exposure-state.md)                          |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| currentSeverity [`IncidentSeverity`](/api-documentation/api-reference/api--response-center/types/enums/incident-severity.md)                  |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| isMonitoring `Boolean!`                                                                                                                       |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| affectedResourceCount `Int!`                                                                                                                  |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| summary [`[IncidentSummarySection!]!`](/api-documentation/api-reference/api--response-center/types/objects/incident-summary-section.md)       |             | <p>title <code>String!</code><br>bullets <code>\[String!]!</code><br>lines <a href="/pages/ATQzbLrwvPzMprRcO5Yd"><code>\[IncidentSummaryLine!]!</code></a></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| aiSummary [`IncidentAiSummary`](/api-documentation/api-reference/api--response-center/types/objects/incident-ai-summary.md)                   |             | <p>bullets <code>\[String!]!</code><br>generatedAt <code>DateTime</code><br>model <code>String</code></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| indicatorCounts [`IncidentIndicatorCounts`](/api-documentation/api-reference/api--response-center/types/objects/incident-indicator-counts.md) |             | <p>cve <code>Int!</code><br>package <code>Int!</code><br>packageRange <code>Int!</code><br>image <code>Int!</code><br>issue <code>Int!</code><br>advisorySource <code>Int!</code></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| countsAsOf `DateTime`                                                                                                                         |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| lastMatchedAt `DateTime`                                                                                                                      |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| lastExposureChange `DateTime`                                                                                                                 |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| resolvedAt `DateTime`                                                                                                                         |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| createdAt `DateTime`                                                                                                                          |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| updatedAt `DateTime`                                                                                                                          |             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| indicators [`[Indicator!]`](/api-documentation/api-reference/api--response-center/types/objects/indicator.md)                                 |             | <p>id <code>String!</code><br>incidentId <code>String!</code><br>kind <a href="/pages/h2nrEA2141Z4pp4WKVPY"><code>IndicatorKind!</code></a><br>value <code>String!</code><br>versionRange <code>String</code><br>fixedVersions <code>\[String!]!</code><br>isCompromised <code>Boolean</code><br>severity <a href="/pages/CSXZmUIYQcTfIZIInSIK"><code>IncidentSeverity</code></a><br>cvssScore <code>Float</code><br>addedAt <code>DateTime!</code><br>source <code>String!</code><br>addedBy <code>String</code><br>status <code>String!</code><br>url <code>String</code><br>lastFetchedAt <code>DateTime</code><br>autoExpand <code>Boolean</code><br>matchState <a href="/pages/OFsAdxkNXjYgoPj9X0Xo"><code>IndicatorMatchState</code></a><br>activeMatchCount <code>Int</code></p> |

### References

#### Queries using this object:

* [\<?> getIncident](/api-documentation/api-reference/api--response-center/queries/get-incident.md)

#### Mutations using this object:

* [<\~> updateIncidentName](/api-documentation/api-reference/api--response-center/mutations/update-incident-name.md)
* [<\~> updateIncidentDescription](/api-documentation/api-reference/api--response-center/mutations/update-incident-description.md)
* [<\~> updateIncidentSeverity](/api-documentation/api-reference/api--response-center/mutations/update-incident-severity.md)
* [<\~> updateIncidentType](/api-documentation/api-reference/api--response-center/mutations/update-incident-type.md)
* [<\~> updateIncidentStatus](/api-documentation/api-reference/api--response-center/mutations/update-incident-status.md)
* [<\~> createIncident](/api-documentation/api-reference/api--response-center/mutations/create-incident.md)

#### Fields with this object:

* [{} IncidentsConnection.items](/api-documentation/api-reference/api--response-center/types/objects/incidents-connection.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ox.security/api-documentation/api-reference/api--response-center/types/objects/incident.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.