Risk Concentration

Risk Heatmap

High-risk concentration zones derived from entity connections, actor activity and asset volume. Larger, hotter cells indicate where threat exposure concentrates.

What the Risk Heatmap delivers

The Risk Heatmap shows you where your threat exposure concentrates at a glance. It combines actor risk (50%), connection density (25%) and asset volume (25%) into a single score per zone — so the hottest cells tell you immediately where to focus the investigation.

4 ways to slice the data
Jurisdiction

See which countries / regions carry the highest concentration of high-risk activity.

Actor Type

Compare risk exposure across exchanges, mixers, marketplaces, ransomware groups and more.

Typology

Discover which laundering patterns (peel chain, mixing, pig-butchering…) dominate your data.

Infrastructure

Spot the hosting providers and infrastructure around which the most risk concentrates.

How to use it — step by step
  1. 1

    Use the toggle buttons (top-left) to choose how to slice the data: by Jurisdiction, Actor Type, Typology or Infrastructure.

  2. 2

    Each cell is a concentration zone. Hotter and redder = more risk; the big number is its composite score (0–100).

  3. 3

    Read the cell at a glance: it shows the zone name, number of links and actors, the score and the total asset volume flowing through it.

  4. 4

    Cells are sorted automatically — the most dangerous zones always appear first (top-left).

  5. 5

    Click a cell to open a detail panel that breaks down actors, connections, asset volume, sanctioned count and how the score was built.

  6. 6

    Use the color legend (top-right) to read severity quickly: cyan = low, amber = elevated, orange = high, red = critical.

The heatmap updates automatically from your live actor and wallet data — no scan needed. Empty? Add actors and wallets to populate it.
Low
Elevated
High
Critical