> ## Documentation Index
> Fetch the complete documentation index at: https://quintsecurity.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Scores

> Risk scoring for events

# Risk Scoring

Every event captured by the Quint daemon carries a risk score from 0 to 100. This score is a **corroborating behavioral signal from the shadow-mode layer**, not the enforcement mechanism — enforcement is deterministic scope evaluation, where only `scope:out_of_scope_sensitive` is block-capable. The score is computed from action type, tool invoked, target sensitivity, and behavioral context, and is useful for triage and filtering.

Risk scores are included as fields on events and can be filtered via the [Events API](/api/events):

```bash theme={null}
# Get events with risk score above 50
curl "https://api.quintai.dev/v1/events?min_risk=50" \
  -H "Authorization: Bearer qt_deploy_YOUR_TOKEN"
```

## Score Bands

| Score  | Risk Level | Color  |
| ------ | ---------- | ------ |
| 0-10   | None       | Green  |
| 11-30  | Low        | Blue   |
| 31-55  | Medium     | Yellow |
| 56-80  | High       | Orange |
| 81-100 | Critical   | Red    |

## Aggregate Statistics

The `GET /v1/events/stats` endpoint provides 24-hour aggregates including event counts and risk distribution:

```bash theme={null}
curl https://api.quintai.dev/v1/events/stats \
  -H "Authorization: Bearer qt_deploy_YOUR_TOKEN"
```

## Session Risk Summary

Each session includes a risk summary when retrieved via `GET /v1/sessions/{id}`, showing total events, maximum risk score, and average risk across all events in the session.