---
title: "Count threats"
method: GET
path: "/threatmonitoring/threat/count"
tags: ["threatmonitoring"]
---

# Count threats

`GET /threatmonitoring/threat/count`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/threatmonitoring/threat/count`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/threatmonitoring/threat/count/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns the total count of Threat Monitoring threats for an organization matching the given filter.

Required API key permissions: `BreachRisk` (select when creating API key in Account Settings)

## Query parameters

- `module` 'dark_web' | 'open_web' | 'social_media'
- `date_period` 'last_twenty_four_hours' | 'last_seven_days' | 'last_thirty_days' | 'last_three_months' | 'last_six_months' | 'last_twelve_months' | 'all_time'
- `date_period_timezone` string
- `date_field` 'date_occurred' | 'date_detected' | 'date_alerted' | 'date_updated' | 'date_closed'
- `transforms` string[]
- `severities` string[]
- `threat_types` string[]
- `source_types` string[]
- `auto_dismissed` boolean
- `closed_status` string[]
- `threat_status` 'open' | 'investigating' | 'remediating' | 'closed'

## Response `200`

A count of threats

- GetThreatMonitoringResultsCountResponsePayloadBody
  - `total_results` integer: The total number of threats matching the filter

## Other responses

- `403`: Account does not have access to requested entities
- `404`: There was a problem with the request
- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

## Changes

- **2026-11-07** `d044bf6dc61e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/changes/threatmonitoring/threat/count/get.md)

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)