Detector library

Supplier Radar ships with a library of ready-to-use detector templates. Each template becomes a live detector on your org when you apply it from the dashboard — it watches your connected sources for events that match its focus, enriches matches with vendor context, and routes them into triage. This page documents each built-in template so you can decide what to turn on. The library currently includes 75 detector templates across 7 segments. Most are standard detectors that read a natural-language goal and severity guidance; a small number are watchlist detectors that screen monitored vendors against connected sources such as sanctions lists.

Detector templates are a starting point. Once applied, every detector’s instructions, severity threshold, category filters, sources, and reviewers are fully editable in the dashboard, and detectors learn from dismissed alerts. See Supplier Radar for the product overview and Radar API for programmatic access.

Severity levels

Each template ships with a default severity threshold. Detectors surface matches at or above their threshold; you can raise or lower it per detector.

Severity	Meaning
High	Confirmed, material impact — active exploitation, confirmed breach, insolvency, sanctions
Medium	Credible, significant events warranting review
Low	Early or lower-impact signals worth monitoring
Informational	Contextual updates (e.g. ownership changes) tracked without urgency

Cybersecurity

Attack-surface, threat-intelligence, and infrastructure-security signals affecting your vendors.

Detector	Default severity	What it flags
Actively Exploited Vulnerabilities	High	CVEs, zero-days, and vendor product flaws exploited in the wild
Ransomware Vendor Impact	High	Ransomware and extortion incidents affecting vendors or service delivery
Malware or Supply Chain Compromise	High	Malicious packages, compromised updates, and supplier supply-chain attacks
Nation-State or APT Targeting	High	Nation-state or APT campaigns targeting a vendor, its products, or its sector
Critical Patch Advisories	Medium	Emergency patches and critical security advisories
Cloud Service Security Incidents	Medium	Security incidents at cloud, SaaS, hosting, and identity providers
Credential or Token Compromise	Medium	Leaked credentials, API keys, tokens, and accounts in breach corpora
Identity and Access Control Failures	Medium	MFA bypass, account takeover, and IAM failures
Phishing and Social Engineering Campaigns	Medium	Campaigns abusing vendor brands, platforms, or employee access
Internet-Exposed Services and Misconfigurations	Medium	Exposed databases, admin panels, and risky misconfigurations
Malicious Infrastructure and Domain Reputation	Medium	Vendor domains or IPs reported malicious, blocklisted, or serving malware
DDoS and Service Disruption Attacks	Medium	Denial-of-service attacks disrupting vendor platforms or customer access
Insider Threat and Data Theft	Medium	Rogue-employee data theft, insider fraud, and privileged-access abuse
Dark Web and Underground Exposure	Medium	Vendor data, access, or credentials advertised on criminal forums
ICS, OT, and IoT Vulnerabilities	Medium	Industrial, operational-technology, and connected-device flaws
TLS and Certificate Weaknesses	Low	Weak, expired, or mis-issued TLS certificates and transport-security gaps
Domain, DNS, and Email Security Gaps	Low	Subdomain-takeover risk and missing SPF, DKIM, or DMARC
Open-Source Dependency Risk	Low	Critical vulnerabilities or abandonment in open-source components

Breaches & Privacy

Confirmed and suspected data incidents, privacy enforcement, and data-handling controversies.

Detector	Default severity	What it flags
Confirmed Data Breach	High	Confirmed unauthorized access to vendor or customer data
Health Data and HIPAA Breach	High	Breaches of protected health information and HIPAA enforcement
Possible Data Exposure	Medium	Suspected leaks, exposed databases, and leak investigations
Privacy Regulatory Investigations	Medium	Privacy inquiries and regulator scrutiny of data practices
GDPR, CCPA, and Data Protection Actions	Medium	Fines and actions under major data-protection regimes
Biometric and AI Privacy Risk	Medium	Privacy issues tied to biometrics, AI systems, and automated decisions
Third-Party Data Sharing Concerns	Medium	Risky vendor sharing, sale, or onward-processing of data
Breach Notification Filings	Medium	Official breach notifications filed with regulators or attorneys general
Children’s Data and Sensitive-Population Privacy	Medium	COPPA, minors’ data, and sensitive-population privacy issues

Operational Issues

Service, continuity, corporate, and geopolitical events that affect a vendor’s ability to deliver.

Detector	Default severity	What it flags
Service Outages and Degradation	Medium	Outages, degraded service, and major incident reports
Business Continuity Disruption	Medium	Events threatening a vendor’s ability to operate or deliver
Product Recalls and Safety Issues	Medium	Recalls, safety alerts, quality failures, and hazardous products
Geopolitical or Sanctions Disruption	Medium	Geopolitical exposure, sanctions, export controls, or instability
Subprocessor and Fourth-Party Risk	Medium	Incidents at a vendor’s critical subprocessors and fourth parties
Certification and Attestation Lapse	Medium	Expired, withdrawn, or failed SOC 2, ISO, and other certifications
Customer Support and Service Failures	Low	Widespread complaints about support, delivery, or service quality
Workforce Instability and Layoffs	Low	Mass layoffs and key-personnel departures signaling instability
M&A and Change of Control	Informational	Acquisitions, divestitures, leadership shifts, and ownership changes

Legal & Enforcement

Regulatory enforcement, litigation, and conduct matters with material vendor impact.

Detector	Default severity	What it flags
Government Contracting Suspension	High	Debarment, suspension, procurement bans, or contract termination
Regulatory Enforcement Actions	Medium	Formal enforcement, consent orders, penalties, and corrective actions
Material Lawsuits and Class Actions	Medium	Litigation affecting vendor stability, obligations, or reputation
Anti-Bribery and Corruption	Medium	Bribery, corruption, FCPA, sanctions evasion, and misconduct
Labor and Human Rights Actions	Medium	Forced labor, labor violations, and worker-rights disputes
Environmental Enforcement	Medium	Environmental fines, pollution incidents, and permit violations
Intellectual Property Infringement	Medium	Patent, copyright, or trade-secret suits threatening products
Data Localization and Sovereignty Actions	Medium	Data-residency, cross-border transfer, and sovereignty enforcement
Antitrust and Competition Actions	Low	Antitrust probes, competition rulings, and market-power enforcement

Reputation

Media, conduct, and trust signals that may warrant a vendor review.

Detector	Default severity	What it flags
Executive Misconduct	Medium	Misconduct, resignations, investigations, and governance concerns
Whistleblower Allegations	Medium	Credible whistleblower disclosures of misconduct or safety failures
Negative Media Spikes	Low	Sudden negative coverage that may require review
Major Customer Losses	Low	Loss of key customers, partnerships, or market trust
Misinformation or Harmful Content	Low	Content-moderation, platform-abuse, and harmful-use issues
Security Reputation Drop	Low	Public downgrades or negative analyst reports on security posture
Social Backlash and Boycott	Low	Viral backlash, boycotts, and coordinated reputation campaigns
Greenwashing and ESG Misrepresentation	Low	Misleading sustainability, diversity, or ESG claims

Financial & Compliance

Financial-stability, credit, and financial-crime signals, plus watchlist screening.

Detector	Default severity	What it flags
Watchlist Screening	High	Screens monitored vendors against connected sanctions and watchlist sources
Bankruptcy or Insolvency Risk	High	Bankruptcy filings, insolvency warnings, and going-concern risk
Credit Rating Downgrades	Medium	Rating downgrades, covenant breaches, and debt-risk signals
Accounting or Internal Control Issues	Medium	Restatements, audit concerns, and control failures
Financial Crime Compliance	Medium	AML, KYC, sanctions, fraud, and market-abuse actions
Contractual SLA Penalties	Medium	Penalties, contract breaches, and SLA failures
Funding and Runway Risk	Medium	Down rounds, failed raises, and cash-runway warnings
Delisting and Exchange Warnings	Medium	Stock delisting notices, exchange warnings, and going-private distress
Earnings or Guidance Downgrade	Low	Material revenue, margin, or forecast deterioration
Insurance Coverage Risk	Low	Loss of cyber, liability, or required insurance coverage
Concentration and Single-Source Risk	Informational	Signals that many customers depend on a single vendor or provider

AI & Model Risk

AI- and model-specific incidents, security, governance, and regulatory signals — for monitoring vendors that build or depend on AI systems.

Detector	Default severity	What it flags
AI Security: Jailbreaks and Prompt Injection	High	Jailbreaks, prompt injection, and adversarial exploitation of vendor AI
AI Data Leakage and Training-Data Extraction	High	Sensitive-data leakage via AI systems, memorization, or training-data extraction
AI Model Supply-Chain and Provenance	High	Poisoned models, malicious artifacts, and compromised model-hub supply chains
AI Model Safety Incidents	Medium	Unsafe, harmful, or out-of-scope AI outputs and model-behavior incidents
AI Training-Data and IP Disputes	Medium	Copyright, licensing, and IP litigation over training data and outputs
AI Regulatory Enforcement	Medium	EU AI Act and other AI-specific regulatory action and enforcement
AI Bias and Discrimination	Medium	Algorithmic bias, discriminatory outcomes, and automated-decision harm
AI Model Outage or Deprecation	Medium	AI/LLM API outages, model deprecations, and capability changes
AI Deepfake and Brand Impersonation	Medium	Deepfakes and synthetic media impersonating a vendor or its executives
AI Governance and Transparency Gaps	Low	Responsible-AI program failures, missing disclosures, and governance lapses
Shadow AI and Unsanctioned Use	Low	Unsanctioned AI-tool use that may expose customer or regulated data

Source library

The companion library of built-in source templates that these detectors read from.

Supplier Radar

The product overview: signal ingestion, enrichment, triage, and workflow orchestration.

Radar API

Create radar events, and list, retrieve, and dismiss radar alerts programmatically.

Control Set library

The companion library of built-in control-set templates, including AI governance frameworks.

Webhooks

Subscribe to RadarDetectorResult.* events and react in real time.

Getting started

Products

Control Set library

Trust & security

API Reference

Data Import & Export

Integration Workflows

AI, Agents, MCP

Severity levels

Cybersecurity

Breaches & Privacy

Operational Issues

Legal & Enforcement

Reputation

Financial & Compliance

AI & Model Risk

Source library

Supplier Radar

Radar API

Control Set library

Webhooks

​Severity levels

​Cybersecurity

​Breaches & Privacy

​Operational Issues

​Legal & Enforcement

​Reputation

​Financial & Compliance

​AI & Model Risk

​Related

Source library

Supplier Radar

Radar API

Control Set library

Webhooks

Severity levels

Cybersecurity

Breaches & Privacy

Operational Issues

Legal & Enforcement

Reputation

Financial & Compliance

AI & Model Risk

Related