Hi,
When the "Sophos Labs Global Activity" is offline ('Feed Offline' shown as an overlay) it defaults to a "Threat level" of 1 - Green.
Calling...
GET /fp/49af5ff1-dfe7-4984-9f2e-f77da4ba11b8/api/labs/threats/levels/current
and modifying the response to be a 0:
{"level":0}
The UI, accepts 0 as a response so it should be easy to set the default to 0 (grey) if no data is returned.
Regards,
Jak