{"uid":"cap_ZSMzibhe-Fz1PiD4rwByX","slug":"dragons-eye-ransomware-tracker-vendor-report-336b80f7","name":"Dragons Eye Ransomware Tracker - Vendor Report","description":"Public ransomware intelligence: live monitoring of leak-site victim claims, a directory of tracked ransomware groups, sector and geography statistics, MITRE ATT&CK context, and activity trends — for defenders, researchers, and SOC analysts.","url":"https://api.ransomware-tracker.com/v1/vendor-report?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["vendors"],"properties":{"vendors":{"type":"string","maxLength":12000,"description":"Vendor domains or company names separated by newlines or semicolons, max 100, e.g. acme.com;Example Corp"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"label":"unverified claim from a criminal leak site","report":"vendor_ransomware_risk","summary":{"by_risk":{"high":1,"unknown":0,"elevated":0,"historical":0,"none_found":1},"partial":false,"headline":"1 of 2 vendors were named in a ransomware leak-site claim in the last 90 days. Start with them.","overall_risk":"high","groups_involved":[{"group":"akira","vendors":1}],"vendors_checked":2,"priority_vendors":[{"risk":"high","groups":["akira"],"vendor":"example.com","newest_claim_at":"2026-09-01T00:00:00Z"}],"vendors_with_claims":1},"vendors":[{"kind":"domain","risk":"high","found":true,"claims":[{"group":"akira","label":"unverified claim from a criminal leak site","sector":"Technology","country":"United States","sources":[{"url":"https://www.ransomlook.io/","name":"RansomLook","license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/"}],"website":"example.com","organization":"example.com","first_observed_at":"2026-09-01T03:10:00Z","claimed_published_at":"2026-09-01T00:00:00Z"}],"groups":["akira"],"status":"ok","vendor":"example.com","actions":["Ask the vendor in writing whether they had a security incident, what data was involved and whether your data was in scope."],"claim_count":1,"newest_claim_at":"2026-09-01T00:00:00Z","oldest_claim_at":"2026-09-01T00:00:00Z"},{"kind":"name","risk":"none_found","found":false,"claims":[],"groups":[],"status":"ok","vendor":"Example Org","actions":["No claim found in the licensed sources. Keep normal monitoring; this is not proof the vendor was never attacked."],"claim_count":0,"newest_claim_at":null,"oldest_claim_at":null}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"3","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$3/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"3","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"3","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_h37cOtcda5wYhIm6QmkiZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"3","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks up to 100 vendor domains or company names against ransomware leak-site claims and returns per-vendor risk ratings, involved ransomware groups, claim details, and recommended actions.","exampleAgentPrompt":"Can you run a ransomware exposure check on these vendors for me: acme.com, globex.com, and Initech Corp — I want to know if any of them have appeared on ransomware leak sites and which groups were involved.","exampleUseCases":[{"title":"Pre-contract vendor security screening","prompt":"Before we sign this new SaaS contract, can you check whether vendor-a.com and vendor-b.com have had any ransomware leak-site claims against them recently, and tell me which groups were involved if so?"},{"title":"SOC third-party risk triage","prompt":"I need a ransomware risk report for our top 10 suppliers — here are their domains: supplier1.com; supplier2.com; supplier3.com; supplier4.com; supplier5.com; supplier6.com; supplier7.com; supplier8.com; supplier9.com; supplier10.com. Flag anyone at high or elevated risk and tell me what actions we should take."},{"title":"Post-breach supplier impact check","prompt":"We just heard that Akira ransomware has been active in the tech sector — can you check if any of our vendors like cloudprovider.com or softwareco.com show up in their leak-site claims?"}],"resultDescription":"Returns a per-vendor breakdown with a risk level (high, elevated, historical, none_found, unknown), matched ransomware groups, individual claim details (sector, country, organization, first observed, claimed published date, source attribution), and recommended actions. Also includes an aggregated summary with overall risk, a priority vendor list, group tallies, and a plain-English headline.","failureModes":["Too many vendors submitted (over 100) causing a validation error","Malformed vendor list (incorrect delimiter or encoding) leading to a parse error","Vendor name ambiguity resulting in no match when a match exists","Claim data may be delayed relative to live leak sites","No claims found does not mean the vendor was never attacked — only that no licensed source recorded a claim","Payment failure (insufficient USDC balance) blocking the request","Temporary upstream data source unavailability returning partial results"],"whenToPreferThis":"Use this endpoint when you need batch ransomware exposure screening for multiple vendors (up to 100) at once, want structured per-vendor risk ratings with recommended follow-up actions, and need claim details attributed to specific ransomware groups with source licensing info. Prefer this over single-lookup endpoints when doing supply-chain audits, pre-contract due diligence, or SOC triage across a vendor list.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T12:35:05.909Z","isFirstParty":false,"canonicalSlug":"dragons-eye-ransomware-tracker-vendor-report-336b80f7"}