# Fetch CIS benchmark rule details for a compliance profile

Retrieves CIS benchmark rule-level details for a specific profile and resource. Shows the hierarchical rule tree (groups/subgroups/rules), scan results, and remediation fix text.

## Endpoint

`GET /dcapi/scap/compliance/benchmark`

## Request URL

`https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/dcapi/scap/compliance/benchmark`

## Scope

`DesktopCentralCloud.VulnerabilityMgmt.READ`

## Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Query Parameters

| Parameter | Type | Required | Description |
|---|---|---|---|
| profileId | long | Optional | CIS profile/benchmark ID |
| profileType | long | Optional | Profile type. 1 = XCCDF, 0 = OVAL |
| resourceId | long | Optional | Computer/resource ID |
| collectionId | long | Optional | Collection ID of the compliance association |

## Sample Request

```curl
curl --request GET \
  --url https://appdomains/dcapi/scap/compliance/benchmark \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| scanStatus | string | Scan status. `SCAN_COMPLETED` or `YET_TO_SCAN` |
| profileId | long | The queried profile ID |
| title | string | Constructed as policyName - profileTitle |
| summary | string | Profile description (sanitized HTML) |
| scapType | string | SCAP standard type. `XCCDF` or `OVAL` |
| source | string | Built-in or Custom |
| date | string | Upload timestamp of the benchmark |
| steps | JSON Array | Hierarchical tree of groups/rules with scan results |