{"uid":"cap_XQw-USSTY9wKafdsZUoRW","slug":"ot-ics-portfolio-risk-exposure-aggregator-3af3d186","name":"OT/ICS Portfolio Risk Exposure Aggregator","description":"Board/GRC-level portfolio risk aggregator. Pass sector and region. Aggregates the same deterministic capability x opportunity x intent scoring used by /ot/threat-score across the actors relevant to that sector, ranks them, and returns a DeepSeek-written executive summary (BLUF structure, ICD-203 language). Optional compliance_framework noted qualitatively in the narrative. Portfolio-level companion to /ot/threat-score — for vCISO agents and GRC/board-reporting automation.","url":"https://ot-intel-api.onrender.com/ot/risk-exposure","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["sector","region"],"properties":{"region":{"type":"string","description":"Target region e.g. GCC, KSA, UAE, Qatar, Europe"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"timeframe":{"type":"string","description":"Optional lookback window, default 90d"},"vendor_stack":{"type":"string","description":"Optional comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC' — feeds each actor's capability score, same as /ot/threat-score"},"compliance_framework":{"type":"string","description":"Optional — framework to note qualitatively in the narrative e.g. NIST_CSF_2_0, IEC_62443_3_2"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"region":"GCC","sector":"energy","timeframe":"90d","confidence":"moderate","top_threats":[{"actor":"ELECTRUM","confidence":"moderate","threat_score":26}],"data_sources":["OT-Intel-DB","GDELT Project (gdeltproject.org)","OFAC Sanctions List (US Treasury)","DeepSeek-CTI-Synthesis"],"executive_summary":{"bluf":"GCC energy sector faces elevated risk from state-linked ICS-targeting actors.","narrative":"Threat activity against regional energy infrastructure has likely increased..."},"compliance_framework":null,"portfolio_risk_level":"ELEVATED"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.4","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.4/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.4","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.4","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_GoipqspKZojfpeWFzrFg-","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.4","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Aggregates capability-opportunity-intent threat scores across all relevant threat actors for a given sector and region, returning a ranked actor list and AI-written executive summary (BLUF/ICD-203) for board and GRC reporting.","exampleAgentPrompt":"Give me a board-level OT risk exposure summary for the energy sector in the GCC region — include Schneider Modicon and Siemens SIMATIC in the vendor stack and frame it against IEC 62443-3-2 compliance.","exampleUseCases":null,"resultDescription":"Returns a ranked list of threat actors relevant to the specified sector and region, each scored on capability, opportunity, and intent dimensions, along with a DeepSeek-generated executive summary in BLUF structure using ICD-203 language. If a compliance framework is specified, it is noted qualitatively within the narrative.","failureModes":["Missing required 'sector' or 'region' query parameter returns a 400 error","Unknown or unsupported sector/region combination may return empty actor list or low-confidence summary","DeepSeek LLM narrative generation timeout or failure may delay or omit the executive summary","Invalid compliance_framework value may be silently ignored or cause a malformed narrative","Render.com cold-start latency may cause initial request timeout on idle instances"],"whenToPreferThis":"Use this endpoint when you need a portfolio-wide, board- or GRC-ready aggregation of OT threat actor risk across a full sector and region — rather than a single actor-target pairing (use /ot/threat-score for that). Best for vCISO automation, quarterly board reporting, or compliance narrative generation where you need ranked actor intelligence and an AI-written executive summary rather than raw scores alone.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T12:49:44.716Z","isFirstParty":false}