---
title: "Retrieve risks detected for devices."
method: GET
path: "/api/v1/accounts/{accountId}/riskassessment/devicesrisk"
---

# Retrieve risks detected for devices.

`GET /api/v1/accounts/{accountId}/riskassessment/devicesrisk`

## Request

- Base URL: `https://api.usa.cloud.watchguard.com/rest/aether-endpoint-security/aether-mgmt`
- URL: `https://api.usa.cloud.watchguard.com/rest/aether-endpoint-security/aether-mgmt/api/v1/accounts/{accountId}/riskassessment/devicesrisk`
- Auth: API key in header `WatchGuard-API-Key` and HTTP bearer
- TypeScript: <https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/docs/api/v1/accounts/:accountId/riskassessment/devicesrisk/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a count of risks detected on each device by risk level. The response to this request is limited to 3,000 records.

## Path parameters

- `accountId` string, required

## Query parameters

- `top` integer
- `skip` integer
- `search` string
- `count` boolean
- `filter` string

## Response `200`

OK

- RiskAssessmentDevicesRiskResultFindResponse
  - `data` RiskAssessmentDevicesRiskResult
    - `host_name` string: Host name of the device.
    - `device_id` string, uuid: Identifier for the device.
    - `last_connection_date` string, date-time: Date and time of the last connection of the device.
    - `device_risk_severity` 0 | 5 | 20 | 30 | 40: Risk level associated with the device. - 0: Undefined - 5: Without risk - 20: Medium risk - 30: High risk - 40: Critical risk
    - `risk_status_counters` RiskStatusCountersType
      - `total_critical_risk` integer: Number of critical-level risks found on the device.
      - `total_high_risk` integer: Number of high-level risks found on the device.
      - `total_medium_risk` integer: Number of medium-level risks found on the device.
      - `total_without_risk` integer: Number of risks not found on the device.
      - `total_not_applicable_by_platform` integer: Number of devices not compatible with operating system or type of device.
      - `total_not_evaluated_on_device` integer: Number of risk not evaluated on the device because they were not enabled for detection.
  - `total_items` integer, nullable: Optionally, if Count parameter is provided, we return here the total number of items

## Other responses

- `400`: BAD REQUEST.
- `403`: ACCESS DENIED.
- `404`: NOT FOUND.
- `405`: METHOD NOT ALLOWED.
- `500`: INTERNAL ERROR.

---

[API](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api.md) - [All operations](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/llms.txt) - [OpenAPI document](https://skmtc.dev/watchguard/apis/aether-endpoint-security-api/revisions/1376eee70d39?raw)