Article ID: m0817
Security Operations Center (SOC) Dashboard
Use the RMM API to build a security-focused dashboard that helps monitor the security status of all managed devices.
The API provides information about antivirus protection and active alerts, allowing you to quickly identify devices that require attention.
Antivirus status
| Endpoint | What it returns |
|---|---|
| GET /api/v1/computers/stat/antivirus/latest (fleet-wide, paged) | Returns the antivirus status for every managed device, including whether protection is active and whether virus definitions are up to date. |
Security alerts
| Endpoint | What it returns |
|---|---|
| GET /api/v1/computers/stat/summary/latest (fleet-wide, paged) | Returns the current alert status for every managed device, along with other health information. |
Recommended approach
- Retrieve antivirus status for all managed devices.
- Retrieve the current alert status.
- Display devices that require attention, for example:
- Antivirus protection is disabled.
- Virus definitions are out of date.
- An active alert is present.
- Group or filter devices by customer or site, if required.
Recommended polling interval:
- Poll the Antivirus endpoint every 60 minutes.
- If your dashboard also displays alerts, poll the Summary endpoint every 10 minutes to receive new alerts shortly after they become available.