# Services from ot-intel-api.onrender.com on Zero

> ot-intel-api.onrender.com serves 40 paid API services for AI agents, indexed by Zero. Each is callable per call with payment handled by Zero.

Canonical page: https://www.zero.xyz/host/ot-intel-api.onrender.com
Live health (JSON, refreshed every minute): https://www.zero.xyz/host/ot-intel-api.onrender.com/health.json

## Services

- [OT-Intel CVE Triage API](https://www.zero.xyz/c/ot-intel-api-onrender-com-31db0df9/llms.txt): $0.02/call via x402. Returns OT-adjusted CVE severity, cyber-physical impact, patch feasibility, and CISA KEV status for a given CVE ID in ICS/SCADA environments
- [OT Intel API – ICS Threat Actor Profile Lookup](https://www.zero.xyz/c/ot-intel-api-onrender-com-0cbb849d/llms.txt): $0.03/call via x402. Fetches a comprehensive ICS/OT threat actor profile by name, including MITRE ATT&CK for ICS technique mappings, known malware/tools, attribution, physical impact assessment, and recommended OT detections.
- [OT/ICS D3FEND Mitigation Map](https://www.zero.xyz/c/ot-ics-d3fend-mitigation-map-35ef2b92/llms.txt): $0.2/call via x402. Returns MITRE ATT&CK ICS techniques mapped to D3FEND defensive countermeasures with prioritized prescriptive remediation guidance, given a threat actor, CVE, or technique ID.
- [OT ATT&CK-for-ICS Precursor TTP Classifier](https://www.zero.xyz/c/ot-att-ck-for-ics-precursor-ttp-classifier-accc571b/llms.txt): $0.04/call via x402. Classifies a named ICS/OT threat actor's known ATT&CK-for-ICS TTPs into pre-impact (recon through C2) vs impact-stage categories using deterministic tactic-taxonomy lookup.
- [CISA ICS-CERT Advisory Feed – Vendor/Sector Filter](https://www.zero.xyz/c/ot-intel-api-onrender-com-557e989a/llms.txt): $0.02/call via x402. Returns the latest CISA ICS-CERT security advisories filtered by vendor and/or industrial sector, including CVE lists, CVSS scores, and severity ratings.
- [OT Intel API - CTI Claim Reliability Scorer](https://www.zero.xyz/c/ot-intel-api-cti-claim-reliability-scorer-814da898/llms.txt): $0.2/call via x402. Scores the reliability of a cyber threat intelligence claim by classifying it against three LLM failure modes and returning a verdict with supporting evidence
- [OT/ICS Vendor AI Copilot Exposure Lookup](https://www.zero.xyz/c/ot-ics-vendor-ai-copilot-exposure-lookup-ebd74d18/llms.txt): $0.2/call via x402. Returns a hand-verified mapping of an OT/ICS vendor's AI/agentic copilot capabilities, autonomy level, access model, and applicable MITRE ATLAS attack techniques.
- [OT/ICS IOC Enrichment with Campaign Context](https://www.zero.xyz/c/ot-intel-api-onrender-com-01af0b9c/llms.txt): $0.01/call via x402. Enriches an IP address or domain IOC with OT/ICS-specific threat intelligence, combining AlienVault OTX, AbuseIPDB, and DeepSeek CTI to determine if it is linked to industrial control system targeting campaigns.
- [OT/ICS Portfolio Risk Exposure Aggregator](https://www.zero.xyz/c/ot-ics-portfolio-risk-exposure-aggregator-3af3d186/llms.txt): $0.4/call via x402. Aggregates capability-opportunity-intent threat scores across all relevant threat actors for a given sector and region, returning a ranked actor list and AI-written executive summary (BLUF/ICD-203) for board and GRC reporting.
- [OT Compliance Batch Gap Assessment](https://www.zero.xyz/c/ot-compliance-batch-gap-assessment-e4d1fa15/llms.txt): $0.2/call via x402. Performs a single aggregated compliance-gap assessment across up to 25 CVEs and/or threat actors, returning deduplicated control gaps and a remediation summary across OT/ICS security frameworks.
- [OT/ICS Remediation Action Conformance Gate](https://www.zero.xyz/c/ot-ics-remediation-action-conformance-gate-4b8ca631/llms.txt): $0.12/call via x402. Evaluates a planned OT/ICS remediation action (e.g. block_ip, quarantine_host) against threat intelligence scoring rules and returns an auto_approve, human_review, or reject decision without LLM involvement.
- [OT/ICS AI Attack Feasibility Lookup](https://www.zero.xyz/c/ot-ics-ai-attack-feasibility-lookup-66fbd4b3/llms.txt): $0.2/call via x402. Looks up whether off-the-shelf LLMs can generate working ICS attack code for a given MITRE technique, vendor, or known campaign, based on a peer-reviewed study.
- [OT Intel API – Physics Invariant Reachability Check](https://www.zero.xyz/c/ot-intel-api-physics-invariant-reachability-check-13189bbf/llms.txt): $0.2/call via x402. Validates whether a tank or vessel's reported level change is physically consistent with its metered inflow and outflow using conservation of mass.
- [OT Intel API — ICS Threat Score](https://www.zero.xyz/c/ot-intel-api-ics-threat-score-19e0a9df/llms.txt): $0.04/call via x402. Returns a deterministic capability × opportunity × intent threat score for a specific ICS/OT threat actor targeting a given sector, region, and vendor stack.
- [OT/ICS Vendor Supply-Chain Risk Assessment](https://www.zero.xyz/c/ot-ics-vendor-supply-chain-risk-assessment-fc421673/llms.txt): $0.15/call via x402. Returns a risk tier, confidence score, cited CVEs (KEV/EPSS), threat actor targeting history, and supply-chain mitigation recommendations for a named OT/ICS vendor and optional product line.
- [OT/ICS Patch Feasibility Assessment API](https://www.zero.xyz/c/ot-intel-api-onrender-com-06cd9925/llms.txt): $0.05/call via x402. Returns OT-safe patch feasibility analysis for a given CVE ID, including patch availability, vendor advisories, workarounds, downtime estimates, CISA KEV status, and a risk-vs-disruption score tailored for ICS/SCADA environments.
- [OT Control-Loop Threat Hunt – RMM/LotL Detection](https://www.zero.xyz/c/ot-control-loop-threat-hunt-rmm-lotl-detection-a7d47e43/llms.txt): $0.15/call via x402. Detects control-loop reconnaissance patterns and living-off-the-land/RMM tool abuse from submitted OT/ICS process names and command strings using deterministic keyword matching.
- [OT Intel API – ICS Threat Actors by Industrial Sector](https://www.zero.xyz/c/ot-intel-api-onrender-com-403c5fad/llms.txt): $0.03/call via x402. Returns all known ICS/SCADA/OT threat actor groups targeting a specified industrial sector, sourced from live MITRE ATT&CK for ICS STIX data.
- [OT Intel Analyst Brief](https://www.zero.xyz/c/ot-intel-analyst-brief-6753eb15/llms.txt): $0.12/call via x402. Generates a DeepSeek-synthesised, decision-ready analyst brief (BLUF, key judgments, ICD-203 confidence) for a named ICS/OT threat actor, optionally scoped to a sector.
- [OT Intel API – OT Asset Exposure & Risk Verdict](https://www.zero.xyz/c/ot-intel-api-ot-asset-exposure-risk-verdict-68ea69ad/llms.txt): $0.05/call via x402. Returns a risk score, risk level, escalation flag, recommended action, active CVEs, and associated threat actors for an OT/ICS device identified by vendor, model, sector, and network exposure.
- [OT Intel API – Root Cause Localization (Sensor Z-Score Ranking)](https://www.zero.xyz/c/ot-intel-api-root-cause-localization-sensor-z-score-ranking-b0a7e241/llms.txt): $0.15/call via x402. Ranks which OT/ICS sensors most likely caused a reported anomaly by computing z-score deviations from each sensor's baseline, returning a deterministic ordered list of suspect sensors.
- [OT/ICS Vendor-Swap Risk Delta Comparison](https://www.zero.xyz/c/ot-ics-vendor-swap-risk-delta-comparison-64880a80/llms.txt): $0.2/call via x402. Compares cybersecurity risk tiers between a current and proposed OT/ICS vendor, returning a risk-tier delta and per-vendor summaries to support pre-purchase or migration decisions.
- [OT/ICS IOC/TTP Sighting Submission](https://www.zero.xyz/c/ot-ics-ioc-ttp-sighting-submission-c666ace4/llms.txt): $0.05/call via x402. Submits an anonymized IOC or TTP sighting observed in an OT/ICS environment to enrich a shared threat correlation corpus, without storing any organizational identifier.
- [OT Intel API — ICS Malware Encyclopedia](https://www.zero.xyz/c/ot-intel-api-ics-malware-encyclopedia-8ea8ee79/llms.txt): $0.02/call via x402. Returns detailed intelligence on named ICS/OT malware including capabilities, targeted OT protocols, attributed actor, affected vendors, detection signatures, and MITRE ATT&CK ICS techniques.
- [OT Intel API – ICS Threat Actor Dossier](https://www.zero.xyz/c/ot-intel-api-ics-threat-actor-dossier-11856add/llms.txt): $0.35/call via x402. Returns a comprehensive AI-enriched intelligence dossier for a named ICS/OT threat actor (e.g. SANDWORM, XENOTIME, VOLTZITE), including campaigns, malware, IOCs, detection artifacts, and MITRE ATT&CK ICS mappings.
- [OT Intel API — Active ICS Campaign Tracker](https://www.zero.xyz/c/ot-intel-api-active-ics-campaign-tracker-af6242f1/llms.txt): $0.05/call via x402. Returns currently active (or all) threat campaigns targeting a specified industrial sector, with actor attribution, start dates, geographies, TTPs, and exploited CVEs.
- [OT-Intel ICS Sector Delta Feed](https://www.zero.xyz/c/ot-intel-ics-sector-delta-feed-2c610eae/llms.txt): $0.03/call via x402. Returns only new CVEs, CISA advisories, and threat actor activity for a given ICS/OT sector since the last N days — a change-only feed for efficient cron-based monitoring.
- [OT Intel API – NERC CIP & IEC 62443 Compliance Gap Mapping](https://www.zero.xyz/c/ot-intel-api-nerc-cip-iec-62443-compliance-gap-mapping-3dcc1c01/llms.txt): $0.04/call via x402. Maps a CVE or ICS threat actor to specific NERC CIP and IEC 62443 compliance control gaps, returning compliance status, required actions, and compensating controls for OT/ICS environments.
- [OT Intel API - ICS/SCADA Threat Intelligence Article](https://www.zero.xyz/c/ot-intel-api-ics-scada-threat-intelligence-article-7120659c/llms.txt): $0.45/call via x402. Returns an AI-enriched OT/ICS threat intelligence article for a given CVE or ICS threat actor, including MITRE ATT&CK for ICS mapping, cyber-physical impact, and CISA KEV status
- [OT Intel API — ASN Infrastructure Profiling](https://www.zero.xyz/c/ot-intel-api-asn-infrastructure-profiling-be5d5a46/llms.txt): $0.03/call via x402. Profiles an Autonomous System Number (ASN) for ICS/OT threat relevance, including bulletproof hosting indicators, ICS actor associations, abuse categories, and blocking recommendations.
- [OT/ICS Sector Threat Brief](https://www.zero.xyz/c/ot-ics-sector-threat-brief-399f8b75/llms.txt): $0.1/call via x402. Returns a consolidated ICS/OT threat intelligence brief for a given industrial sector and lookback period, including active threat actors, new CVE counts, active campaigns, top advisories, and risk trend.
- [OT Intel API – ICS Threat Actor Report](https://www.zero.xyz/c/ot-intel-api-ics-threat-actor-report-0af571ec/llms.txt): $0.25/call via x402. Generates a comprehensive AI-enriched threat intelligence report for a named ICS/OT threat actor (e.g. CHERNOVITE, SANDWORM), covering campaigns, malware, advisories, and detection artifacts with MITRE ATT&CK ICS mapping
- [OT Intel API – Sector Situation Report (sitrep)](https://www.zero.xyz/c/ot-intel-api-sector-situation-report-sitrep-d3664373/llms.txt): $0.35/call via x402. Generates a comprehensive AI-enriched OT/ICS threat situation report for a specified industrial sector covering active campaigns, advisories, actor activity, compliance gaps, and sector deltas over a configurable lookback period.
- [OT Intel GCC Bulletin](https://www.zero.xyz/c/ot-intel-gcc-bulletin-ecd0668c/llms.txt): $0.01/call via x402. Retrieves a human-reviewed OT/ICS threat intelligence situational report (sitrep) scoped to the Gulf Cooperation Council (GCC) region, optionally for a specific past edition date.
- [OT Intel API – YARA/Sigma/Snort Detection Artifacts](https://www.zero.xyz/c/ot-intel-api-yara-sigma-snort-detection-artifacts-083f1a65/llms.txt): $0.05/call via x402. Returns YARA, Sigma, and/or Snort detection rules for named OT/ICS malware families and threat actors, enriched with OT safety notes and ATT&CK ICS context
- [OT Intel API – LinkedIn Post Generator](https://www.zero.xyz/c/ot-intel-api-linkedin-post-generator-f5887f8e/llms.txt): $0.15/call via x402. Generates a LinkedIn-ready social post about an OT/ICS threat actor or CVE, formatted with hashtags and character count, drawing on AI-enriched OT threat intelligence.
- [OT Intel API - SCADA/ICS Internet-Exposed Device Lookup](https://www.zero.xyz/c/ot-intel-api-onrender-com-10fa9eeb/llms.txt): $0.05/call via x402. Looks up internet-exposed industrial control system devices by vendor and model, returning default credential risks, at-risk OT protocols, exploitation notes, and hardening recommendations.
- [OT Intel API – STIX Coverage Lookup](https://www.zero.xyz/c/ot-intel-api-stix-coverage-lookup-50ff0c77/llms.txt): $0.2/call via x402. Returns STIX object coverage and actionability scoring for ICS/OT threat observables, mapped from academic research to ATT&CK-for-ICS techniques, CVEs, and ICS protocols.
- [OT Intel API – ICS Threat Actor X-Post Thread Generator](https://www.zero.xyz/c/ot-intel-api-ics-threat-actor-x-post-thread-generator-c22dc430/llms.txt): $0.1/call via x402. Generates a Twitter/X-style multi-post thread on an OT/ICS threat actor or CVE, enriched with OT context, MITRE ATT&CK for ICS mapping, and cyber-physical impact analysis
- [OT AI-Uplift Exposure Assessor](https://www.zero.xyz/c/ot-ai-uplift-exposure-assessor-9dc14b00/llms.txt): $0.2/call via x402. Assesses how much a general-purpose AI agent lowers the barrier for an attacker to reach a vendor's OT/ICS-adjacent footprint, returning a tiered exposure verdict grounded in ICS threat intelligence.

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

- [Zero catalog index](https://www.zero.xyz/llms.txt)