Portfolio monitoring
Upload your insured company list as a watchlist. When one appears on a ransomware leak site, you hear about it the same day — not weeks later in a claim.
Solutions · Insurers & brokers
Know which insured companies were just listed — and which sectors are heating up.
Portfolio watchlists, sector ransomware trend reports, and historical victim data to sharpen underwriting and portfolio monitoring.
Use cases
Three ways insurers use Offsys Intel.
Sector trend reports
Weekly and monthly sector-level ransomware activity reports: which industries are seeing more listings, which gangs are shifting focus, and where volume is trending.
Underwriting data
Historical victim data via API: how often companies in a sector and geography appear on leak sites, which gangs target them, and sector risk scores.
Features you'll use
Built for portfolio and underwriting teams.
- Portfolio watchlists — bulk upload insured companies
- Watchlist match alerts — email, Slack, API webhook
- Sector Edition briefings — weekly ransomware trends by industry
- Executive Brief — monthly one-pager for leadership, no jargon
- REST API — historical victim data, sector risk scores, gang profiles
- STIX 2.1 / CSV / PDF exports
- Gang activity heatmaps and sector forecasts Labs
Example workflow
A day in the life.
01
Portfolio alert
An insured manufacturing company (fictional) appears on a leak site. Your portfolio team is notified within hours, well before a claim is filed.
02
Context and risk assessment
The alert includes the gang profile, their typical behaviour (dump timing, ransom demands), and the company's sector risk score.
03
Proactive outreach
Your claims team reaches out early. The weekly sector report shows whether this is an isolated incident or part of a broader campaign.
Fictional example. No real companies or claims.
See what your portfolio looks like on leak sites.
Send us a list of insured companies. We'll run a free exposure check and show you what we found.
Get a free portfolio check