Confidential Proposal · Benchmarked

Real-Time Risk Event Map

Prepared for RMI. This document is access-restricted. Enter the access key to continue.

Incorrect access key. Please try again.
Benchmarked Group d.o.o.Ljubljana · EU
RMI × BENCHMARKED
Confidential · 2026
Real-Time Situational Awareness

Real-Time
Risk Event Map

A live, automated intelligence layer that continuously ingests open sources, enriches every signal with AI, and plots verified risk events on a single operational map - built for RMI by Benchmarked.

Investment
€13,900 net
Delivery
~5–6 weeks
Source Connectors
5 live
Upkeep
~5h / month
Executive Summary

One map. Every signal. Continuously updated.

Risk-relevant information is scattered across social platforms, messaging channels, government bulletins and news feeds - too fast and too noisy for manual monitoring. This platform automates the entire loop: it collects from five source families, uses large language models to classify and structure each item, maintains a live database of events, and presents them in real time on an interactive map and a prioritized event list. The result is a single pane of glass for operational situational awareness, with full transparency into which sources are currently online.

Product Preview

What the live console looks like

Interactive map with geo-located events, a live prioritized feed, and a connector health bar showing the real-time status of every source - so operators always know exactly how complete the picture is.

riskmap.rmi.internal/live
LIVE
Meta / FB
Telegram
Gov Sites
RSS
X / Twitter
Last sync 14:32 UTC · 1,284 events tracked
REGION VIEW · GULF SECTOR
Sample data
Critical Elevated Low / Resolved
Live Event Feed12 active
RoadblockCRITICAL
Highway blockade reported, primary access route obstructed
Sector 4· 14m ago· ONGOING
Security IncidentCRITICAL
Armed activity near industrial perimeter, sources cross-referenced
Coastal zone· 41m ago· ONGOING
Civil UnrestELEVATED
Demonstration forming near municipal building
City center· 1h 12m ago· 2h est.
InfrastructureELEVATED
Power disruption notice issued by utility provider
North grid· 2h ago· monitoring
WeatherLOW
Heavy rainfall advisory, minor flooding possible
Regional· 3h ago· advisory
LogisticsRESOLVED
Port congestion cleared, operations normalized
Harbor· 5h ago· resolved

Illustrative mockup · sample data shown · final layout, regions and event taxonomy tailored to RMI requirements.

Data Flow

From source to map

Every connector feeds the same live surface. This view shows the five open-source connectors streaming signals down onto the map, where each event is plotted as a severity-coded marker - red for critical, amber for elevated, grey for low or resolved.

LIVE RISK MAP OPEN-SOURCE CONNECTORS TELEGRAM X / TWITTER RSS META / FB GOV SITES

Conceptual 3D view - connectors (top) continuously push enriched events onto the live risk surface (bottom).

Scope of Work

What we build

Three integrated layers - collection, AI enrichment, and visualization - delivered as one cohesive platform.

1 · Collection

Five purpose-built connectors continuously pull risk-relevant content from across the open-source landscape, on a scheduled polling cycle.

2 · AI Enrichment

Every collected item is passed through LLMs that classify the incident, extract a clean title, location and severity, and de-duplicate against the live database.

3 · Visualization

Structured events feed a live interactive map (where coordinates exist) and a prioritized, filterable event list - with real-time connector status.

The five source connectors

Each connector is independently monitored, rate-limit aware, and individually maintainable.

01
Facebook / MetaPublic pages, groups and posts relevant to monitored regions
Connector
02
TelegramPublic channels and groups - a primary fast-signal source for incidents
Connector
03
Government WebsitesOfficial bulletins, advisories and alerts from designated agency sites
Connector
04
RSS FeedsNews outlets and structured feeds - broad, reliable, low-friction coverage
Connector
05
X / TwitterReal-time posts from monitored accounts, keywords and geographies
Connector

The live event record

For every detected event, the LLM pipeline extracts and maintains a structured record:

FieldDescription
incident_typeClassified category (e.g. roadblock, security incident, civil unrest, infrastructure, weather).
titleA clean, human-readable summary of the event generated from the raw source content.
reported_atTimestamp of when the event was first detected / reported.
durationWhether the event is ongoing, and an estimate of how long it has been / will be active where determinable.
locationGeographic location and coordinates - when present in the source (see coverage notes below).
severityAI-assigned severity level used for prioritization and map colour-coding.
Architecture

How it works

A continuous, automated pipeline running on a fixed cycle - from raw source to live map.

01
Collect

5 connectors poll their sources on schedule and capture new content.

02
Enrich

LLMs classify, summarize, geolocate and score each item.

03
Store

Events are de-duplicated and written to a live database.

04
Display

Map + prioritized feed update in real time, with connector health.

Please Read · Expectations

Important considerations

This is a living system - not a one-off deliverable.

A platform that depends on third-party sources is fundamentally different from a static website. It must be actively maintained to keep working. We want to be completely transparent about this before you commit.

1
Ongoing maintenance is required (~5 hours / month)

Source platforms regularly change their APIs, page structures, authentication, and access rules - often without notice. When they do, the affected connector breaks until it is updated. We budget approximately 5 hours per month to keep connectors healthy and adapt to these changes. Without this upkeep, connectors will gradually degrade and go offline.

2
Coverage will never be 100% - gaps are expected

No automated collection system captures everything. There will always be events the platform misses or surfaces late. This is inherent to the problem, not a defect, and should be planned for accordingly.

3
Why gaps happen

Synchronization windows mean events appear only on the next polling cycle; API rate limits cap how much we can pull in a given period; platform anti-scraping protections can block or throttle collection; and content that is private, removed, geographically untagged or ambiguous cannot be reliably captured or placed on the map.

4
Connector status is always visible

Rather than hide these limitations, the console shows the live status of every connector - online, degraded, or offline - so operators always know how complete the current picture is and can interpret the map accordingly.

5
A decision-support tool, not a guaranteed feed

The platform is designed to dramatically improve situational awareness and reduce manual monitoring - but it complements, and does not replace, human judgement and other intelligence sources.

Roadmap

Possible scope extensions

Optional additions that can be scoped as future phases once the core platform is live.

+
Alerting - push notifications for new critical events via Telegram, email or Slack
+
Geofenced alerts - trigger only when events fall inside defined zones of interest
+
Additional connectors - extend collection to further platforms or regional sources
+
Historical analytics - trends, heatmaps and reporting over time
+
Custom severity model - tune scoring to RMI's specific risk framework
+
API / data export - feed events into RMI's own downstream systems
Investment

Pricing

A fixed price for the core build, plus a recommended maintenance retainer to keep the system reliable over time.

One-time platform build
€13,900 net
net of VAT · Benchmarked Group d.o.o.
  • 5 source connectors (Meta, Telegram, Gov sites, RSS, X)
  • LLM enrichment pipeline (classify, summarize, geolocate, score)
  • Live event database with de-duplication
  • Interactive live map + prioritized event feed
  • Connector health / status dashboard
  • Deployment, configuration and handover
Recommended · Maintenance retainer
€690 / month

≈ 5 hours / month to maintain connectors, adapt to platform changes, and keep the system healthy. Strongly recommended - see considerations above.

Operating costs
at cost est. €150–400/mo

LLM API usage, hosting and collection infrastructure - billed at cost and dependent on volume. Estimated range provided for planning.

All amounts are net (excluding VAT). The maintenance retainer and operating costs are separate from the one-time build. Scope extensions are quoted individually. This proposal is valid for 30 days from the date of issue.

Delivery

Indicative timeline

Week 1
Discovery & source mapping

Confirm regions, source accounts/channels, incident taxonomy and severity definitions with RMI.

Weeks 2–4
Connectors & enrichment

Build and test the five connectors and the LLM classification / geolocation pipeline against live data.

Weeks 4–5
Map, feed & status console

Build the live map, prioritized event list and connector health dashboard.

Week 6
Testing & handover

End-to-end validation, tuning, deployment and walkthrough with the RMI team.

Ready to move forward?

We're happy to walk the RMI team through this proposal, refine the scope, and align on regions and sources before kick-off.