---
title: "Get security risk info for applications"
method: GET
path: "/network-monitoring/v1/security-risks"
tags: ["Application Visibility"]
---

# Get security risk info for applications

`GET /network-monitoring/v1/security-risks`

## Request

- Base URL: `https://sso.common.cloud.hpe.com`
- URL: `https://sso.common.cloud.hpe.com/network-monitoring/v1/security-risks`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://sso.common.cloud.hpe.com/as/token.oauth2`
- TypeScript: <https://skmtc.dev/arubanetworks/apis/authorization/docs/network-monitoring/v1/security-risks/get.ts> (a function with typed inputs; its response is checked against the schema)

This API endpoint returns a breakdown of application security risks (High / Medium / Low) for the requested scope. The maximum time range is 7 days. If the range between start-at and end-at exceeds 7 days, start-at is automatically adjusted to be 7 days before end-at. This is intentional behavior; no error is returned.

## Query parameters

- `start-at` string, date-time, required
- `end-at` string, date-time, required
- `site-id` string, const
- `client-id` string, const
- `serial-number` string, const
- `ssid` string, const
- `user-role` string, const
- `offset` integer
- `limit` integer

## Response `200`

Successful operation.

- SecurityRiskInfoResponse: Security risk breakdown for applications in the requested scope.
  - `items` Risk[], required: List of risk level entries.
    - `id` 'HIGH' | 'MEDIUM' | 'LOW', required: Risk level identifier.
    - `type` string, const, required: Resource type.
    - `generation` integer, required: Monotonically increasing update counter.
    - `createdAt` string, date-time, required: Creation timestamp in RFC 3339 format.
    - `updatedAt` string, date-time, required: Last update timestamp in RFC 3339 format.
    - `displayName` string, const, required: Human-readable risk level name.
    - `count` integer, required: Number of applications at this risk level.
  - `count` integer, required: Number of risk level entries returned.
  - `total` integer, required: Total count of items that meet the API request parameters.
  - `offset` integer, required

## Other responses

- `400`: Invalid input received.
- `401`: Unauthorized. Authentication credentials are required or invalid.
- `403`: Forbidden: Access is denied.
- `404`: Not Found error.
- `429`: Too Many Requests. The user has sent too many requests in a given amount of time.
- `500`: Internal Server Error. An unexpected error occurred on the server.
- `503`: Service unavailable.

---

[API](https://skmtc.dev/arubanetworks/apis/authorization.md) - [All operations](https://skmtc.dev/arubanetworks/apis/authorization/llms.txt) - [OpenAPI document](https://skmtc.dev/arubanetworks/apis/authorization/revisions/74c95058b11f?raw)