AD Base Entities3

AD Users11

AIA CAs3

Alerts17

Analysis3

API Info2

API Tokens3

Asset Isolation33

Asset Scores1

Attack Paths11

Audit1

Auth14

Azure Entities1

BloodHound Users12

Cert Templates3

Client Ingest1

Clients24

Collection Uploads6

Collectors6

Computers16

Config4

Containers2

Custom Node Management5

Cypher12

Data Quality6

Database1

Datapipe4

Domains17

Enterprise CAs4

EULA1

Events (Schedules)5

GPOs6

Graph7

Groups10

Jobs9

Meta Entities1

NT Auth Stores3

OpenGraph (Experimental)8

OUs5

Permissions2

Risk Posture2

Roles2

Root CAs3

Search2

Tasks9

Risk Posture

Enterprise

Get Posture Statistics

Gets the history of database stats saved in the database

get/api/v2/posture-stats

Query parameters

sort_bystring

Sort by column. Can be used multiple times; prepend a hyphen for descending order. See parameter description for details about which columns are sortable.

Sortable columns are domain_sid, exposure_index, tier_zero_count, critical_risk_count, id, created_at, updated_at, deleted_at.

fromstring date-time

Lower bound for created_at; to return posture stats starting at a specific date/time. This filter has been deprecated, please use created_at instead.

tostring date-time

Upper bound for created_at; to return posture stats upto a specific date/time. This filter has been deprecated, please use created_at instead.

domain_sidstring

Filter results by column string value. Valid filter predicates are eq, ~eq, neq.

exposure_indexstring

Filter results by column integer value. Valid filter predicates are eq, neq, gt, gte, lt, lte.

asset_group_tag_idstring

Filter results by column integer value. Valid filter predicates are eq, neq, gt, gte, lt, lte.

tier_zero_countstring

Filter results by column integer value. Valid filter predicates are eq, neq, gt, gte, lt, lte.

critical_risk_countstring

Filter results by column integer value. Valid filter predicates are eq, neq, gt, gte, lt, lte.

idstring

Filter results by column integer value. Valid filter predicates are eq, neq, gt, gte, lt, lte.

created_atstring

Filter results by column timestamp value formatted as an RFC-3339 string. Valid filter predicates are eq, neq, gt, gte, lt, lte.

updated_atstring

Filter results by column timestamp value formatted as an RFC-3339 string. Valid filter predicates are eq, neq, gt, gte, lt, lte.

deleted_atstring

Filter results by column timestamp value formatted as an RFC-3339 string. Valid filter predicates are eq, neq, gt, gte, lt, lte.

Response

OK

countinteger

The total number of results.

skipinteger

The number of items to skip in a paginated response.

limitinteger

The limit of results requested by the client.

startstring date-time

The RFC-3339 timestamp to describe the beginning of a time range

endstring date-time

The RFC-3339 timestamp to describe the end of a time range

Changes

Changed in 4 of the 66 revisions of this API.3434

Apr 1, 202640bf219eced698See the full diff
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter asset_group_tag_id
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter critical_risk_count
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter exposure_index
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter id
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter tier_zero_count
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ to the query request parameter created_at
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ to the query request parameter deleted_at
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ to the query request parameter updated_at
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|~eq|neq):)?[^:]+$ to the query request parameter domain_sid
  request-parameter-pattern-added
- ○
  for the query request parameter asset_group_tag_id, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter created_at, the type/format was generalized from string/date-time to string/
  request-parameter-type-generalized
- ○
  for the query request parameter critical_risk_count, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter deleted_at, the type/format was generalized from string/date-time to string/
  request-parameter-type-generalized
- ○
  for the query request parameter exposure_index, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter id, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter tier_zero_count, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter updated_at, the type/format was generalized from string/date-time to string/
  request-parameter-type-generalized
Apr 1, 20266aaeba6ecdc589See the full diff
- ▲
  for the query request parameter asset_group_tag_id, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter created_at, the type/format was changed from string/ to string/date-time
  request-parameter-type-changed
- ▲
  for the query request parameter critical_risk_count, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter deleted_at, the type/format was changed from string/ to string/date-time
  request-parameter-type-changed
- ▲
  for the query request parameter exposure_index, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter id, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter tier_zero_count, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter updated_at, the type/format was changed from string/ to string/date-time
  request-parameter-type-changed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter asset_group_tag_id
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter critical_risk_count
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter exposure_index
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter id
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter tier_zero_count
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ from the query request parameter created_at
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ from the query request parameter deleted_at
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ from the query request parameter updated_at
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|~eq|neq):)?[^:]+$ from the query request parameter domain_sid
  request-parameter-pattern-removed
Apr 1, 2026674e0a229e8a98See the full diff
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter asset_group_tag_id
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter critical_risk_count
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter exposure_index
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter id
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ to the query request parameter tier_zero_count
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ to the query request parameter created_at
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ to the query request parameter deleted_at
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ to the query request parameter updated_at
  request-parameter-pattern-added
- ▲
  added the pattern ^((eq|~eq|neq):)?[^:]+$ to the query request parameter domain_sid
  request-parameter-pattern-added
- ○
  for the query request parameter asset_group_tag_id, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter created_at, the type/format was generalized from string/date-time to string/
  request-parameter-type-generalized
- ○
  for the query request parameter critical_risk_count, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter deleted_at, the type/format was generalized from string/date-time to string/
  request-parameter-type-generalized
- ○
  for the query request parameter exposure_index, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter id, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter tier_zero_count, the type/format was generalized from integer/ to string/
  request-parameter-type-generalized
- ○
  for the query request parameter updated_at, the type/format was generalized from string/date-time to string/
  request-parameter-type-generalized
Jan 12, 2026a426ff0abf8f89See the full diff
- ▲
  for the query request parameter asset_group_tag_id, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter created_at, the type/format was changed from string/ to string/date-time
  request-parameter-type-changed
- ▲
  for the query request parameter critical_risk_count, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter deleted_at, the type/format was changed from string/ to string/date-time
  request-parameter-type-changed
- ▲
  for the query request parameter exposure_index, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter id, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter tier_zero_count, the type/format was changed from string/ to integer/
  request-parameter-type-changed
- ▲
  for the query request parameter updated_at, the type/format was changed from string/ to string/date-time
  request-parameter-type-changed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter asset_group_tag_id
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter critical_risk_count
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter exposure_index
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter id
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?-?[0-9]+$ from the query request parameter tier_zero_count
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ from the query request parameter created_at
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ from the query request parameter deleted_at
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$ from the query request parameter updated_at
  request-parameter-pattern-removed
- ○
  removed the pattern ^((eq|~eq|neq):)?[^:]+$ from the query request parameter domain_sid
  request-parameter-pattern-removed
This revision also has 3 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog