Read what a remediation kit's reports found on each device
Return what each computer last reported to a kit’s Fleet reports, refreshed every hour without running anything: a count of devices per kind of finding, the devices with something left to fix (paginated, narrowed by platform or status), and the enrolled computers that have not reported yet. A computer with nothing left to fix is counted in cleanDevices. To add the kit first, use addRemediationKit. To read what one script run printed, use getScriptRunExecutions.
Each finding has a status: IOC (a compromised certificate was seen on the device: investigate), EXPOSED (a trust store still trusts a compromised root), STALE (the OS vendor’s block has not reached the device), UPDATE (a runtime or binary to update or rebuild), REVIEW (a toolchain whose version to check) or PRIMO (the Primo agent’s own bundle, which Primo fixes on its own), with an area and a detail that names the fix. Each reported device carries isOnline and resultChangedAt: a device reports every hour while online, and resultChangedAt stays put while its result does not change. offline lists the reported devices that are offline, clean ones included: their findings are the last they sent.
Kits: emudhra_ca_compromise, the eMudhra CA compromise of October 2026 (https://docs.getprimo.com/guides/security/emudhra-ca-compromise).
Authorizations
Use your Primo API key in the Authorization header as Bearer <API_KEY>.
Path Parameters
Query Parameters
Only the devices with a finding of this status
IOC, EXPOSED, STALE, UPDATE, REVIEW, PRIMO Only the devices of this platform
macos, windows, linux Page number
Number of items per page (max 100)
Response
emudhra_ca_compromise Devices whose last report Primo could read.
Reported devices with nothing left to fix.
Devices per kind of finding, over every reported device, most serious first.
The reported devices with at least one finding, narrowed by platform and status, by name.
The first 100 reported devices that are offline, clean or not: their findings are the last they sent.