> For the complete documentation index, see [llms.txt](https://docs.compliance.phalcon.blocksec.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.compliance.phalcon.blocksec.com/manual/risk-engines.md).

# Risk Engines

The Risk Engine is the core risk detection module of the compliance APP, allowing for customizable trigger conditions. While we provide default rules, we recommend you review and adjust them based on your specific business needs and user profiles, and continuously optimize them to address emerging risks.

All Risk Engines are applied globally based on the target type (address or transaction).

We offer two types of risk detection:

* **Exposure Risk**: Detects interactions with high-risk entities (e.g., sanctioned addresses, mixers).
* **Behavioral Risk**: Identifies anomalous fund flow patterns (e.g., rapid transfers, layering).

📌 Learn More:

{% content-ref url="/pages/hY4aEuFLGON8eMBl4NAw" %}
[Risk Exposure Engine](/manual/risk-engines/exposure.md)
{% endcontent-ref %}

{% content-ref url="/pages/d65aytWGmRD4yOOQBMSk" %}
[Behavioral Risk Engine](/manual/risk-engines/behavior.md)
{% endcontent-ref %}

### Risk Engine List

The Risk Engine list displays all created engines, including: Risk Engine Name, Risk Level, Target Type, Risk Type, Notification Channel, Alerts Triggered by the Engine, Status, and the actions available for the engine.

<figure><img src="/files/W8CYCEFszbO0NA0RZpCi" alt="Risk Engine list page"><figcaption></figcaption></figure>

### Create Risk Engine

Click ***Create Risk Engine*** and select from five pre-built templates in the pop-up window. Each template is tailored for specific risk scenarios.

<figure><img src="/files/n4PtQZoZZVIskpkcJyn7" alt="Create Risk Engine template selection" width="563"><figcaption></figcaption></figure>

Fill out the configuration form:

* Basic Information:
  * Name: Set a unique name.
  * Description: Add a brief explanation.
  * Risk Level: Set a risk level, which will be inherited by triggered alerts.
  * Status: Toggle to "Enabled" (active) or "Disabled" (inactive).
* Trigger Conditions: Define rules based on the template.
* Notification Channels: Link a channel (e.g., email, Telegram) for instant alerts. Refer to [Notification Channels](/manual/notification-channels.md).

### Risk Engine Details

The Risk Engine Details page provides a comprehensive view of the engine's settings and performance. Use this page to manage configurations, track alerts, and export reports. You can perform the following actions:

* View and Edit Configuration: Review all details about the Risk Engine and click "Edit" to update the name, description, risk level, trigger conditions, or notification channels.
* View Triggered Alerts: Inspect all alerts generated by the Risk Engine, which are displayed in a table with Alert ID, Address, Risk Level, and Timestamp. Check the trigger rate to gauge activity.
* View Audit Logs: Review operational logs related to the Risk Engine.
* Export Report: Click "Export Report" to download a PDF or CSV file that summarizes the engine's settings, triggered alerts, and audit logs. It can be used as compliance documentation.

<figure><img src="/files/lCW6b4gFCtuWVSiR2eFv" alt="Risk Engine details page"><figcaption></figcaption></figure>