diff --git a/docs/en/cloud/security/audit-logging.md b/docs/en/cloud/security/audit-logging.md
index 7890da18616..f10e4e550fa 100644
--- a/docs/en/cloud/security/audit-logging.md
+++ b/docs/en/cloud/security/audit-logging.md
@@ -4,12 +4,15 @@ slug: /en/cloud/security/audit-logging
 title: Audit Logging
 ---
 
-In ClickHouse Cloud, you can use the **Activity** tab on the left menu to see what changes have been made to your ClickHouse Cloud organization - including who made the change and when it occurred.
+In ClickHouse Cloud, navigate to your organization details. 
 
 <img src={require('./images/activity_log1.png').default} class="image" alt="ClickHouse Cloud activity tab" style={{width: '30%'}}/>
 
 <br/>
 
+Select the **Audit** tab on the left menu to see what changes have been made to your ClickHouse Cloud organization - including who made the change and when it occurred.
+
+
 The **Activity** page displays a table containing a list of events logged about your organization. By default, this list is sorted in a reverse-chronological order (most-recent event at the top). Change the order of the table by clicking on the columns headers. Each item of the table contains the following fields:
 
 
@@ -57,3 +60,7 @@ The different types of events captured for the organization are grouped in 3 cat
 - User joined organization
 - User invitation deleted
 - User left organization
+
+## API for audit events
+
+Users can use the ClickHouse Cloud API `activity` endpoint to obtain an export of audit events. Further details can be found [here](/docs/en/cloud/manage/api/organizations-api-reference#list-of-organization-activities).
diff --git a/docs/en/cloud/security/images/activity_log1.png b/docs/en/cloud/security/images/activity_log1.png
index 05790390b9f..170d582a1a7 100644
Binary files a/docs/en/cloud/security/images/activity_log1.png and b/docs/en/cloud/security/images/activity_log1.png differ
diff --git a/docs/en/cloud/security/images/activity_log2.png b/docs/en/cloud/security/images/activity_log2.png
index 4e2f5479789..d917f4c3381 100644
Binary files a/docs/en/cloud/security/images/activity_log2.png and b/docs/en/cloud/security/images/activity_log2.png differ
diff --git a/docs/en/cloud/security/images/activity_log3.png b/docs/en/cloud/security/images/activity_log3.png
index bbfe3212310..b1113ec786d 100644
Binary files a/docs/en/cloud/security/images/activity_log3.png and b/docs/en/cloud/security/images/activity_log3.png differ