Detector library

Supplier Radar ships with a library of ready-to-use detector templates. Each template becomes a live detector on your organization when you enable it from the dashboard (New detector → From detector library on the Radar page, or Add detector under Configuration → Radar → Detectors). It watches your sources for events that match its focus, enriches matches with vendor context, and routes them into triage. This page documents each built-in template so you can decide what to turn on. The library currently includes 95 detector templates. The dialog filters them by Recommended and by segment: Cybersecurity, Financial, Operational, Legal, Compliance, Reputational, Contractual, ESG, Corporate, Geopolitical & External and AI Risk. The Corporate segment lists no templates today. Most templates are standard detectors that read a natural-language goal and severity guidance. One is a watchlist detector that screens vendors against connected sanctions lists, and five are Black Kite detectors that read your Black Kite portfolio directly, with no AI step.

Detector templates are a starting point. Enabling a standard or watchlist template also adds the library sources it names to your organization and scopes the new detector to them, so it works without further setup; the preview in the dialog lists those sources. Once applied, every detector’s instructions, severity threshold, category filters, sources, and reviewers are fully editable in the dashboard, and detectors learn from dismissed alerts. See Supplier Radar for the product overview and Radar API for programmatic access.

Severity levels

Each template ships with a default severity threshold. Detectors surface matches at or above their threshold; you can raise or lower it per detector.

Severity	Meaning
High	Confirmed, material impact: active exploitation, confirmed breach, insolvency, sanctions
Medium	Credible, significant events warranting review
Low	Early or lower-impact signals worth monitoring
Informational	Contextual updates (for example, ownership changes) tracked without urgency

Detector	Segment	Default severity	What it flags
Vendor Data Breach & Exposure	Cybersecurity	High	Confirmed or credibly suspected access to, exfiltration of, or exposure of vendor-held data, including breach notification filings
Ransomware & Destructive Attack	Cybersecurity	High	Ransomware, extortion, leak-site listings, and destructive attacks on vendors or their upstream providers
Exploited Vulnerabilities & Supply Chain Compromise	Cybersecurity	High	Actively exploited vulnerabilities, emergency patches, and software supply-chain compromises in vendor products
Operational Resiliency & Service Disruption	Operational	Medium	Outages, degradations, facility and disaster impacts, strikes, and continuity events
Vendor Financial Distress	Financial	Medium	Bankruptcy, going-concern doubt, credit downgrades, distressed funding, delisting, and severe earnings deterioration

Cybersecurity

Attack-surface, threat-intelligence, breach, privacy, and infrastructure-security signals affecting your vendors.

Detector	Default severity	What it flags
Actively Exploited Vulnerabilities	High	CVEs, zero-days, and vendor product flaws exploited in the wild
Ransomware Vendor Impact	High	Ransomware and extortion incidents affecting vendors or service delivery
Malware or Supply Chain Compromise	High	Malicious packages, compromised updates, and supplier supply-chain attacks
Nation-State or APT Targeting	High	Nation-state or APT campaigns targeting a vendor, its products, or its sector
Confirmed Data Breach	High	Confirmed unauthorized access to vendor or customer data
Health Data and HIPAA Breach	High	Breaches of protected health information and HIPAA enforcement
Critical Patch Advisories	Medium	Emergency patches and critical security advisories
Cloud Service Security Incidents	Medium	Security incidents at cloud, SaaS, hosting, and identity providers
Credential or Token Compromise	Medium	Leaked credentials, API keys, tokens, and accounts in breach corpora
Identity and Access Control Failures	Medium	MFA bypass, account takeover, and IAM failures
Phishing and Social Engineering Campaigns	Medium	Campaigns abusing vendor brands, platforms, or employee access
Internet-Exposed Services and Misconfigurations	Medium	Exposed databases, admin panels, and risky misconfigurations
Malicious Infrastructure and Domain Reputation	Medium	Vendor domains or IPs reported malicious, blocklisted, or serving malware
Possible Data Exposure	Medium	Suspected leaks, exposed databases, and leak investigations
Privacy Regulatory Investigations	Medium	Privacy inquiries and regulator scrutiny of data practices
GDPR, CCPA, and Data Protection Actions	Medium	Fines and actions under major data-protection regimes
Third-Party Data Sharing Concerns	Medium	Risky vendor sharing, sale, or onward-processing of data
DDoS and Service Disruption Attacks	Medium	Denial-of-service attacks disrupting vendor platforms or customer access
Insider Threat and Data Theft	Medium	Rogue-employee data theft, insider fraud, and privileged-access abuse
Dark Web and Underground Exposure	Medium	Vendor data, access, or credentials advertised on criminal forums. Separate from dark web monitoring, which watches leak sites and breach catalogs directly
ICS, OT, and IoT Vulnerabilities	Medium	Industrial, operational-technology, and connected-device flaws
Breach Notification Filings	Medium	Official breach notifications filed with regulators or attorneys general
Children’s Data and Sensitive-Population Privacy	Medium	COPPA, minors’ data, and sensitive-population privacy issues
TLS and Certificate Weaknesses	Low	Weak, expired, or mis-issued TLS certificates and transport-security gaps
Domain, DNS, and Email Security Gaps	Low	Subdomain-takeover risk and missing SPF, DKIM, or DMARC
Open-Source Dependency Risk	Low	Critical vulnerabilities or abandonment in open-source components

Black Kite templates

These five read your Black Kite portfolio against fixed thresholds and carry a Black Kite badge in the library. They can be enabled only once a Black Kite portfolio source is connected; see the Black Kite monitoring guide.

Detector	Default severity	What it flags
Exploited Vulnerabilities	High	A CISA KEV-listed vulnerability Black Kite found on a vendor’s internet-facing infrastructure, with no susceptibility threshold
Critical Exploitable CVEs	High	Exploited vulnerabilities scoring CVSS 9.0 or higher with at least a 50% predicted chance of exploitation
Vulnerability Campaign Exposure	High	Black Kite focus tags naming a vendor as exposed to a campaign, such as a mass-exploited flaw or a ransomware wave
Ransomware-Susceptible Vendor Exposure	High	Exploited vulnerabilities and focus tags, only for vendors scoring above 0.5 on ransomware susceptibility
Highest Susceptibility Watch	High	The same signals, only for vendors scoring above 0.8 on ransomware susceptibility

Financial

Financial-stability, credit, financial-crime, and concentration signals.

Detector	Default severity	What it flags
Bankruptcy or Insolvency Risk	High	Bankruptcy filings, insolvency warnings, and going-concern risk
Credit Rating Downgrades	Medium	Rating downgrades, covenant breaches, and debt-risk signals
Accounting or Internal Control Issues	Medium	Restatements, audit concerns, and control failures
Financial Crime Compliance	Medium	AML, KYC, sanctions, fraud, and market-abuse actions
Funding and Runway Risk	Medium	Down rounds, failed raises, and cash-runway warnings
Delisting and Exchange Warnings	Medium	Stock delisting notices, exchange warnings, and going-private distress
Adverse Media & Financial Crime	Medium	Fraud, money laundering, sanctions violations, corruption, and executive misconduct allegations
Financial Regulatory Enforcement & Supervisory Actions	Medium	Enforcement and supervisory actions by financial regulators such as the SEC, CFPB, OCC, FDIC, FINRA, and FinCEN
Fourth-Party & Concentration Risk	Medium	Incidents at shared subcontractors, subprocessors, and upstream providers, especially ones many vendors depend on
Earnings or Guidance Downgrade	Low	Material revenue, margin, or forecast deterioration
Insurance Coverage Risk	Low	Loss of cyber, liability, or required insurance coverage
Macroeconomic & Market Stress	Low	Credit-market, banking, currency, and rate shocks that could reach vendor viability or delivery
Concentration and Single-Source Risk	Informational	Signals that many customers depend on a single vendor or provider

Operational

Service, continuity, and corporate events that affect a vendor’s ability to deliver.

Detector	Default severity	What it flags
Service Outages and Degradation	Medium	Outages, degraded service, and major incident reports
Business Continuity Disruption	Medium	Events threatening a vendor’s ability to operate or deliver
Product Recalls and Safety Issues	Medium	Recalls, safety alerts, quality failures, and hazardous products
Subprocessor and Fourth-Party Risk	Medium	Incidents at a vendor’s critical subprocessors and fourth parties
Certification and Attestation Lapse	Medium	Expired, withdrawn, or failed SOC 2, ISO, and other certifications
Customer Support and Service Failures	Low	Widespread complaints about support, delivery, or service quality
Workforce Instability and Layoffs	Low	Mass layoffs and key-personnel departures signaling instability
M&A and Change of Control	Informational	Acquisitions, divestitures, leadership shifts, and ownership changes

Legal

Enforcement, litigation, and conduct matters with material vendor impact.

Detector	Default severity	What it flags
Government Contracting Suspension	High	Debarment, suspension, procurement bans, or contract termination
Regulatory Enforcement Actions	Medium	Formal enforcement, consent orders, penalties, and corrective actions
Material Lawsuits and Class Actions	Medium	Litigation affecting vendor stability, obligations, or reputation
Anti-Bribery and Corruption	Medium	Bribery, corruption, FCPA, sanctions evasion, and misconduct
Labor and Human Rights Actions	Medium	Forced labor, labor violations, and worker-rights disputes
Intellectual Property Infringement	Medium	Patent, copyright, or trade-secret suits threatening products
Data Localization and Sovereignty Actions	Medium	Data-residency, cross-border transfer, and sovereignty enforcement
Antitrust and Competition Actions	Low	Antitrust probes, competition rulings, and market-power enforcement

Compliance

Deterministic screening against connected sanctions and watchlist sources. It needs a watchlist source; enabling it adds the OFAC SDN list from the source library if you have none.

Detector	Default severity	What it flags
Watchlist Screening	High	Screens monitored vendors against connected sanctions and watchlist sources

Reputational

Media, conduct, and trust signals that may warrant a vendor review.

Detector	Default severity	What it flags
Executive Misconduct	Medium	Misconduct, resignations, investigations, and governance concerns
Whistleblower Allegations	Medium	Credible whistleblower disclosures of misconduct or safety failures
Negative Media Spikes	Low	Sudden negative coverage that may require review
Major Customer Losses	Low	Loss of key customers, partnerships, or market trust
Misinformation or Harmful Content	Low	Content-moderation, platform-abuse, and harmful-use issues
Security Reputation Drop	Low	Public downgrades or negative analyst reports on security posture
Social Backlash and Boycott	Low	Viral backlash, boycotts, and coordinated reputation campaigns
Greenwashing and ESG Misrepresentation	Low	Misleading sustainability, diversity, or ESG claims

Contractual

Contract performance signals.

Detector	Default severity	What it flags
Contractual SLA Penalties	Medium	Penalties, contract breaches, and SLA failures

ESG

Environmental enforcement and sustainability signals.

Detector	Default severity	What it flags
Environmental Enforcement	Medium	Environmental fines, pollution incidents, and permit violations

Geopolitical & External

Sanctions, export controls, geopolitical events and natural hazards touching vendors or their regions.

Detector	Default severity	What it flags
Geopolitical & Sanctions Exposure	High	Sanctions designations, export controls, conflict, and instability touching vendors or their operating regions
Geopolitical or Sanctions Disruption	Medium	Geopolitical exposure, sanctions, export controls, or instability
Natural Hazard Near a Supplier Site	Medium	Earthquakes, storms, floods, wildfires and severe weather reaching the location of a vendor’s site. See the natural hazard monitoring guide

AI Risk

AI- and model-specific incidents, security, governance, and regulatory signals, for vendors that build or depend on AI systems.

Detector	Default severity	What it flags
AI Security: Jailbreaks and Prompt Injection	High	Jailbreaks, prompt injection, and adversarial exploitation of vendor AI
AI Data Leakage and Training-Data Extraction	High	Sensitive-data leakage via AI systems, memorization, or training-data extraction
AI Model Supply-Chain and Provenance	High	Poisoned models, malicious artifacts, and compromised model-hub supply chains
AI Security & Data Leakage Incidents	High	Exploited jailbreaks and prompt injection, data leakage, poisoned models, and compromised AI supply chains
Biometric and AI Privacy Risk	Medium	Privacy issues tied to biometrics, AI systems, and automated decisions
AI Model Safety Incidents	Medium	Unsafe, harmful, or out-of-scope AI outputs and model-behavior incidents
AI Training-Data and IP Disputes	Medium	Copyright, licensing, and IP litigation over training data and outputs
AI Regulatory Enforcement	Medium	EU AI Act and other AI-specific regulatory action and enforcement
AI Bias and Discrimination	Medium	Algorithmic bias, discriminatory outcomes, and automated-decision harm
AI Model Outage & Deprecation	Medium	AI/LLM API outages, model deprecations, and capability changes
AI Deepfake and Brand Impersonation	Medium	Deepfakes and synthetic media impersonating a vendor or its executives
AI Legal, Regulatory & IP Actions	Medium	AI-law enforcement, training-data IP litigation, bias claims, and biometric and AI privacy actions
AI Safety, Deepfake & Misuse Incidents	Medium	Harmful AI outputs in vendor products and deepfake abuse of a vendor’s brand, executives, or platform
AI Governance and Transparency Gaps	Low	Responsible-AI program failures, missing disclosures, and governance lapses
Shadow AI and Unsanctioned Use	Low	Unsanctioned AI-tool use that may expose customer or regulated data
Vendor AI Adoption & Data-Use Changes	Low	New AI features, changed AI data-use or training practices, new AI subprocessors, and undisclosed AI use

Source library

The companion library of built-in source templates that these detectors read from.

Supplier Radar

The product overview: signal ingestion, enrichment, triage, and workflow orchestration.

Radar API

Create radar events, and list, retrieve, and dismiss radar alerts programmatically.

Control Set library

The companion library of built-in control-set templates, including AI governance frameworks.

Webhooks

Subscribe to RadarDetectorResult.* events and react in real time.

Overview

Intake and assessment

Vendor intelligence

Monitoring

Marketing compliance

Contracts and documents

Third-party lifecycle

Sourcing and internal controls

Control Set library

Severity levels

Recommended

Cybersecurity

Black Kite templates

Financial

Operational

Legal

Compliance

Reputational

Contractual

ESG

Geopolitical & External

AI Risk

Source library

Supplier Radar

Radar API

Control Set library

Webhooks

​Severity levels

​Recommended

​Cybersecurity

​Black Kite templates

​Financial

​Operational

​Legal

​Compliance

​Reputational

​Contractual

​ESG

​Geopolitical & External

​AI Risk

​Related

Source library

Supplier Radar

Radar API

Control Set library

Webhooks

Severity levels

Recommended

Cybersecurity

Black Kite templates

Financial

Operational

Legal

Compliance

Reputational

Contractual

ESG

Geopolitical & External

AI Risk

Related