<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Performing Cyber Insurance Assessment

## FAIR Risk Quantification Tools

### RiskLens API

| Endpoint | Method | Description |
|----------|--------|-------------|
| `/api/v1/analyses` | POST | Create new FAIR analysis |
| `/api/v1/analyses/{id}/run` | POST | Execute Monte Carlo simulation |
| `/api/v1/analyses/{id}/results` | GET | Retrieve loss exceedance curves |
| `/api/v1/scenarios` | GET | List risk scenarios |
| `/api/v1/assets` | GET | List organizational assets |

### OpenFAIR Formulas

| Component | Formula | Unit |
|-----------|---------|------|
| Loss Event Frequency | TEF × Vulnerability | Events/year |
| Annualized Loss Expectancy | LEF × Loss Magnitude | USD/year |
| Threat Event Frequency | Contact Frequency × Probability of Action | Events/year |
| Vulnerability | Threat Capability − Resistance Strength | Probability 0-1 |

## Underwriter Questionnaire Platforms

| Platform | Format | Coverage |
|----------|--------|----------|
| Coalition Control | Web portal | Real-time scan + questionnaire |
| CyberCube | API + Portal | Analytics-driven underwriting |
| SecurityScorecard | REST API | External risk rating |
| BitSight | REST API | Continuous monitoring rating |

## Coverage Benchmarks

| Coverage Type | Typical Limit | Market Range |
|---------------|--------------|--------------|
| First-Party (Breach Response) | $5M | $1M–$25M |
| Third-Party (Liability) | $5M | $1M–$50M |
| Ransomware Sublimit | $1M–$5M | 50%–100% of aggregate |
| Business Interruption | $2M–$10M | 8–72 hour waiting period |
| Social Engineering | $250K–$500K | Often sublimited |
| Regulatory Defense | $1M–$5M | Includes fines where insurable |
