---
title: "Get security risk info for applications"
method: GET
path: "/network-monitoring/v1/security-risks"
tags: ["Application Visibility"]
---

# Get security risk info for applications

`GET /network-monitoring/v1/security-risks`

This API endpoint returns a breakdown of application security risks (High / Medium / Low) for the requested scope. The maximum time range is 7 days. If the range between start-at and end-at exceeds 7 days, start-at is automatically adjusted to be 7 days before end-at. This is intentional behavior; no error is returned.

## Query parameters

- `start-at` string, date-time, required
- `end-at` string, date-time, required
- `site-id` string, const
- `client-id` string, const
- `serial-number` string, const
- `ssid` string, const
- `user-role` string, const
- `offset` integer
- `limit` integer

## Response `200`

Successful operation.

- SecurityRiskInfoResponse — Security risk breakdown for applications in the requested scope.
  - `items` Risk[], required — List of risk level entries.
    - `id` 'HIGH' | 'MEDIUM' | 'LOW', required — Risk level identifier.
    - `type` string, const, required — Resource type.
    - `generation` integer, required — Monotonically increasing update counter.
    - `createdAt` string, date-time, required — Creation timestamp in RFC 3339 format.
    - `updatedAt` string, date-time, required — Last update timestamp in RFC 3339 format.
    - `displayName` string, const, required — Human-readable risk level name.
    - `count` integer, required — Number of applications at this risk level.
  - `count` integer, required — Number of risk level entries returned.
  - `total` integer, required — Total count of items that meet the API request parameters.
  - `offset` integer, required

## Other responses

- `400` — Invalid input received.
- `401` — Unauthorized. Authentication credentials are required or invalid.
- `403` — Forbidden: Access is denied.
- `404` — Not Found error.
- `429` — Too Many Requests. The user has sent too many requests in a given amount of time.
- `500` — Internal Server Error. An unexpected error occurred on the server.
- `503` — Service unavailable.

---

[API](https://skmtc.net/arubanetworks/apis/authorization.md) · [All operations](https://skmtc.net/arubanetworks/apis/authorization/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/arubanetworks/authorization/revisions/74c95058b11f/schema)