360 Secure SkillHub
360 安全技能中心

Risk Assessment Compliance

这是面向数字资产的安全合规评估API，核心功能含网站/应用漏洞检测、PCI-DSS/OWASP/GDPR等合规框架对齐、风险评分及整改建议。适合安全团队、合规人员、DevOps工程师持续监控资产安全，或应对监管审计、安全认证场景。输入为带协议的目标URL，输出含安全分数、合规状态、漏洞详情等的结构化JSON报告，助力制定安全决策。

krishnakumarmahadevan-cmd
krishnakumarmahadevan-cmd
热度 44.09
最近更新 2026-05-11 17:34:40
分类：安全依赖：第三方 API应用场景：报告撰写 / 法律文档

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add risk-assessment-compliance
Metadata
name
Risk Assessment & Compliance
description
Performs comprehensive security checks and compliance risk assessments on websites and applications.

Overview

Risk Assessment & Compliance is a security-focused API that evaluates web applications and websites for vulnerabilities, compliance violations, and security posture. It provides detailed risk assessments that help organizations identify potential security gaps, regulatory compliance issues, and remediation priorities.

This tool is essential for security teams, compliance officers, and DevOps engineers who need to continuously monitor and validate the security posture of their digital assets. The API performs deep security analysis including vulnerability detection, compliance framework alignment, and risk scoring to support informed security decisions.

Ideal users include security operations centers (SOCs), compliance teams, penetration testers, application security engineers, and organizations undergoing regulatory audits or security certifications.

Usage

Sample Request

{
  "url": "https://example.com"
}

Sample Response

{
  "url": "https://example.com",
  "security_score": 78,
  "compliance_status": "PARTIAL",
  "vulnerabilities": [
    {
      "type": "Missing Security Header",
      "severity": "High",
      "header": "Strict-Transport-Security",
      "remediation": "Add HSTS header with max-age of at least 31536000 seconds"
    }
  ],
  "compliance_frameworks": {
    "PCI-DSS": "Non-Compliant",
    "OWASP": "Compliant",
    "GDPR": "Partial"
  },
  "risk_level": "Medium",
  "assessment_timestamp": "2024-01-15T10:30:45Z"
}

Endpoints

Security Check

Method: POST

Path: /security-check

Description: Performs a comprehensive security check and compliance risk assessment on a specified URL. Analyzes the target website for common vulnerabilities, security headers, compliance violations, and generates a risk assessment report.

Parameters:

Name Type Required Description
url string Yes The complete URL of the website or application to assess (must include protocol, e.g., https://example.com)

Response (200 - Success):

Returns a JSON object containing:

  • url: The assessed URL
  • security_score: Numeric score (0-100) indicating overall security posture
  • compliance_status: Status of compliance (Compliant, Partial, Non-Compliant)
  • vulnerabilities: Array of identified vulnerabilities with severity and remediation guidance
  • compliance_frameworks: Assessment against industry standards (PCI-DSS, OWASP, GDPR, etc.)
  • risk_level: Overall risk classification (Low, Medium, High, Critical)
  • assessment_timestamp: ISO 8601 timestamp of assessment execution

Response (422 - Validation Error):

Returns validation error details including:

  • detail: Array of validation errors with location, message, and error type

Pricing

Plan Calls/Day Calls/Month Price
Free 5 50 Free
Developer 20 500 $39/mo
Professional 200 5,000 $99/mo
Enterprise 100,000 1,000,000 $299/mo

About

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

References