Introduction

ORION API

The ORION API gives underwriters, auditors, third-party risk management (TPRM) and GRC teams, deal teams, and boards a number they can act on: the Quantified Resilience™ Score (QR Score), a daily-calculated 0 to 100 score of how well an organization’s infrastructure can withstand and recover from disruption. Every score is backed by tens of thousands of failure simulations against a digital twin of the live environment, continuously verified rather than annually self-reported.

One score, every audience: cyber underwriters price and renew against it, regulators and auditors accept it as date-stamped evidence, deal teams and TPRM/GRC analysts compare targets and third parties with it, and boards track it quarter over quarter. All of them read the same number.

What you can do

Get the current scoreRetrieve the latest QR Score and grade

See the pillar breakdownUnderstand which resilience dimension drives the score

Track trendsView score history over windows of up to 365 days

Understand the methodologyReview how the score is calculated and weighted

Explore the use casesOne example read from every seat: Boards & Regulators, Insurance, M&A, TPRM

Publish a trust pageSubject-owned disclosure, continuously re-attested on your public site

Getting access

The ORION API serves scores for organizations that are actively monitored by the ORION platform. Access works differently depending on who you are:

You lead security for your organization. Your infrastructure gets connected to ORION, a digital twin is built, and daily scoring begins. Credentials for this API are issued from your ORION environment. Talk to us to get started.

You are evaluating an organization you don’t control. Underwriters, auditors, and TPRM, GRC, deal, and diligence teams access scores in one of two ways: the organization shares its Authorization artifact from its public trust page, a verifiable, subject-owned attestation of its current score, pillars, grade, and trend; or the organization issues you scoped API credentials directly from its ORION environment. Either way, the subject controls the disclosure. Contact us to discuss underwriting and diligence workflows.

QR Score at a glance

The score is composed of four pillars with configurable weights (defaulting to 25% each):

Pillar	What it measures
Structural Integrity	Network architecture robustness: single points of failure, redundancy
Failure Resistance	Survival under random and targeted attacks
Device Health	Current health and risk status of all devices
Recovery Capability	Expected loss across 10K to 100K simulated failure scenarios

Scores are graded on an action-oriented scale:

Score	Grade	Meaning
90–100	Sustain	Highly resilient; maintain current practices
75–89	Optimize	Strong foundation; fine-tune for excellence
60–74	Strengthen	Adequate; build on existing capabilities
40–59	Improve	Targeted improvements needed
0–39	Prioritize	Action required; address foundational gaps

Base URL

All API requests use the following base URL:

https://api.overspace.io/orion/v1