Retrieve failed-attack data for a specific tenant. Returns attack counts by country, daily attack breakdowns by type, and the most targeted users for the requested date range.
app.petrasecurity.com/tenant/<tenantId>). You can also pass a Microsoft tenant ID and the endpoint will resolve it automatically.Bearer token authentication. Include your API key in the Authorization header as 'Bearer YOUR_API_KEY'
The tenant to generate the report for. Accepts either a Petra tenant ID or a Microsoft tenant ID. You can find a tenant's Petra ID in the URL when viewing a tenant in the dashboard (e.g. app.petrasecurity.com/tenant/
Start of the reporting window. Accepts ISO 8601 date or date-time (e.g. 2026-03-01 or 2026-03-01T00:00:00Z). Defaults to 30 days before endDate.
End of the reporting window. Accepts ISO 8601 date or date-time. Defaults to now.
Successful response
The tenant this report covers
Total number of failed attacks in the window
Failed attacks grouped by origin country
Daily breakdown of failed attacks grouped by attack type
Users most targeted by failed attacks