Supplier risk

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://darkradar.com/docs/schemas/supplier-risk.schema.json",
  "title": "Supplier risk",
  "description": "An inbound or external supplier risk card.",
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "description": "Normalized supplier domain."
    },
    "infections": {
      "type": "number",
      "description": "Distinct infected machines."
    },
    "lastSeenAt": {
      "type": [
        "string",
        "null"
      ],
      "description": "Most recent observation time."
    },
    "score": {
      "type": "number",
      "description": "Deterministic risk score from 0 to 100."
    },
    "grade": {
      "type": "string",
      "description": "Risk grade: A (lowest) through F (highest)."
    },
    "ageDays": {
      "type": [
        "number",
        "null"
      ],
      "description": "Days since the latest observation."
    },
    "criticalSystem": {
      "type": "boolean",
      "description": "Whether the domain identifies a critical system such as VPN, SSO, or identity."
    },
    "affectedEmployees": {
      "type": "number",
      "description": "Distinct affected employee identities."
    },
    "severity": {
      "type": "string",
      "description": "Highest severity among inbound events."
    }
  }
}