---
title: "Retrieves detected risks."
method: GET
path: "/api/v1/accounts/{accountId}/riskassessment/detectedrisks"
---

# Retrieves detected risks.

`GET /api/v1/accounts/{accountId}/riskassessment/detectedrisks`

## Request

- Base URL: `https://api.usa.cloud.watchguard.com/rest/aether-endpoint-security/aether-mgmt`
- URL: `https://api.usa.cloud.watchguard.com/rest/aether-endpoint-security/aether-mgmt/api/v1/accounts/{accountId}/riskassessment/detectedrisks`
- Auth: API key in header `WatchGuard-API-Key` and HTTP bearer
- TypeScript: <https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/docs/api/v1/accounts/:accountId/riskassessment/detectedrisks/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a count of detected devices for each type of risk.

## Path parameters

- `accountId` string, required

## Query parameters

- `filter` string

## Response `200`

OK

- RiskAssessmentDetectedRisksResultFindResponse
  - `data` RiskAssessmentDetectedRisksResult
    - `risk_factor` 10 | 20 | 30 | 40 | 50 | 60 | 70 | 80 | 90 | 100 | 110 | 120 | 130 | 140 | 150 | 160 | 170 | 180: Identifier of the risk. - 10: Protection with error - 20: Outdated protection - 30: Outdated knowledge - 40: Knowledge communication status - 50: Uninstallation without protection - 60: Anti tampering disabled - 70: Antivirus disabled - 80: Audit working mode - 90: Hardening working mode - 100: Audit working mode for linux - 110: AntiExploits audit working mode - 120: Detect phishing disabled - 130: Web antivirus disabled - 140: Antivirus exclusions - 150: Indicators of attack - 160: Pending critical patches - 170: Audit mode enabled - 180: Network attack protection disabled or in 'Audit' mode
    - `risk_severity` 0 | 20 | 30 | 40 | 50: Assigned risk level. - 0: Undefined - 20: Medium risk - 30: High risk - 40: Critical risk - 50: Based on indicators of attack risks
    - `total_active_devices_counter` integer: Number of devices where the risk was detected.
    - `total_without_risk` integer: Number of devices where the risk was not detected.
    - `total_not_applicable_by_platform` integer: Number of devices where the risk was not evaluated because it is not compatible with the type of device.
    - `total_not_evaluated_on_device` integer: Number of devices where the risk was not evaluated because you did not enable it for detection.
  - `total_items` integer, nullable: Optionally, if Count parameter is provided, we return here the total number of items

## Other responses

- `400`: BAD REQUEST.
- `403`: ACCESS DENIED.
- `404`: NOT FOUND.
- `405`: METHOD NOT ALLOWED.
- `500`: INTERNAL ERROR.

---

[API](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api.md) - [All operations](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/llms.txt) - [OpenAPI document](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/revisions/1376eee70d39?raw)