Api Endpoint

AI Attack Feasibility Check

Deterministic lookup against Cook et al. (ACM TOPS 2026) testing whether off-the-shelf LLMs generate working ICS attack code. Pass technique (name/ID, e.g. 'Brute Force I/O' or T0806), vendor (Siemens, Schneider Electric, Rockwell Automation — only these tested), and/or campaign (Industroyer2, Fuxnet, FrostyGoop, INCONTROLLER, Stuxnet, Triton). Only Network/Register-Tags techniques succeeded; 1.08% success rate; Claude excluded (stronger guardrails). No LLM in lookup path.

Open interactive test console

Offering

Provider: ot-intel-api.onrender.com
Method: GET
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://ot-intel-api.onrender.com/ot/ai-attack-feasibility
MIME type: application/json
First seen: 2026-10-16T01:59:37.852Z
Last seen: 2026-11-02T22:16:24.989Z
Tags: AI, Search, Utility

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.2 USDC
Atomic price: 200000 · Network: eip155:8453 · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "200000",
    "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B"
  }
]

Observed health

Status: Healthy
Latest latency: 296 ms
Average latency: 272 ms
HTTP status: 402
Last checked: 2026-11-02T22:16:24.982Z
Reachability: 100% over 5 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET"
      ]
    },
    "queryParams": {
      "type": "object",
      "properties": {
        "technique": {
          "type": "string",
          "description": "MITRE ICS technique name or ID, e.g. 'Brute Force I/O' or T0806. At least one of technique, vendor, or campaign must be present."
        },
        "vendor": {
          "type": "string",
          "description": "Siemens, Schneider Electric, or Rockwell Automation — only these three vendors were tested in the study."
        },
        "campaign": {
          "type": "string",
          "description": "Industroyer2, Fuxnet, FrostyGoop, INCONTROLLER, Stuxnet, or Triton."
        }
      },
      "required": []
    }
  },
  "required": [
    "type",
    "method"
  ],
  "additionalProperties": false
}

Output schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string"
    },
    "example": {
      "type": "object"
    }
  },
  "required": [
    "type"
  ]
}