Overview
Risk Assessment & Compliance is a security-focused API that evaluates web applications and websites for vulnerabilities, compliance violations, and security posture. It provides detailed risk assessments that help organizations identify potential security gaps, regulatory compliance issues, and remediation priorities.
This tool is essential for security teams, compliance officers, and DevOps engineers who need to continuously monitor and validate the security posture of their digital assets. The API performs deep security analysis including vulnerability detection, compliance framework alignment, and risk scoring to support informed security decisions.
Ideal users include security operations centers (SOCs), compliance teams, penetration testers, application security engineers, and organizations undergoing regulatory audits or security certifications.
Usage
Sample Request
CODEBLOCK0
Sample Response
CODEBLOCK1
Endpoints
Security Check
Method: INLINECODE0
Path: INLINECODE1
Description: Performs a comprehensive security check and compliance risk assessment on a specified URL. Analyzes the target website for common vulnerabilities, security headers, compliance violations, and generates a risk assessment report.
Parameters:
| Name | Type | Required | Description |
|---|
| INLINECODE2 | string | Yes | The complete URL of the website or application to assess (must include protocol, e.g., https://example.com) |
Response (200 - Success):
Returns a JSON object containing:
- -
url: The assessed URL - INLINECODE5 : Numeric score (0-100) indicating overall security posture
- INLINECODE6 : Status of compliance (Compliant, Partial, Non-Compliant)
- INLINECODE7 : Array of identified vulnerabilities with severity and remediation guidance
- INLINECODE8 : Assessment against industry standards (PCI-DSS, OWASP, GDPR, etc.)
- INLINECODE9 : Overall risk classification (Low, Medium, High, Critical)
- INLINECODE10 : ISO 8601 timestamp of assessment execution
Response (422 - Validation Error):
Returns validation error details including:
- -
detail: Array of validation errors with location, message, and error type
Pricing
| Plan | Calls/Day | Calls/Month | Price |
|---|
| Free | 5 | 50 | Free |
| Developer |
20 | 500 | $39/mo |
| Professional | 200 | 5,000 | $99/mo |
| Enterprise | 100,000 | 1,000,000 | $299/mo |
About
ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.
References
- - Kong Route: https://api.mkkpro.com/compliance/risk-assessment
- API Docs: https://api.mkkpro.com:8014/docs
概述
风险评估与合规是一款专注于安全的API，用于评估Web应用和网站的漏洞、合规违规情况及安全态势。它提供详细的风险评估，帮助组织识别潜在的安全漏洞、监管合规问题及修复优先级。
该工具对于需要持续监控和验证数字资产安全态势的安全团队、合规官和DevOps工程师至关重要。该API执行深度安全分析，包括漏洞检测、合规框架对齐和风险评分，以支持明智的安全决策。
理想用户包括安全运营中心、合规团队、渗透测试人员、应用安全工程师以及正在接受监管审计或安全认证的组织。
使用方式
示例请求
json
{
url: https://example.com
}
示例响应
json
{
url: https://example.com,
security_score: 78,
compliance_status: PARTIAL,
vulnerabilities: [
{
type: 缺少安全标头,
severity: 高,
header: Strict-Transport-Security,
remediation: 添加HSTS标头，max-age至少为31536000秒
}
],
compliance_frameworks: {
PCI-DSS: 不合规,
OWASP: 合规,
GDPR: 部分合规
},
risk_level: 中,
assessment_timestamp: 2024-01-15T10:30:45Z
}
端点
安全检查
方法： POST
路径： /security-check
描述： 对指定URL执行全面的安全检查和合规风险评估。分析目标网站的常见漏洞、安全标头、合规违规情况，并生成风险评估报告。
参数：
| 名称 | 类型 | 必填 | 描述 |
|---|
| url | 字符串 | 是 | 待评估网站或应用的完整URL（必须包含协议，例如https://example.com） |
响应（200 - 成功）：
返回包含以下内容的JSON对象：
- - url：被评估的URL
- securityscore：表示整体安全态势的数值评分（0-100）
- compliancestatus：合规状态（合规、部分合规、不合规）
- vulnerabilities：已识别漏洞的数组，包含严重性和修复指导
- complianceframeworks：针对行业标准的评估（PCI-DSS、OWASP、GDPR等）
- risklevel：整体风险分类（低、中、高、严重）
- assessment_timestamp：评估执行的ISO 8601时间戳
响应（422 - 验证错误）：
返回验证错误详情，包括：
- - detail：验证错误数组，包含位置、消息和错误类型
定价
| 套餐 | 每日调用次数 | 每月调用次数 | 价格 |
|---|
| 免费 | 5 | 50 | 免费 |
| 开发者 |
20 | 500 | $39/月 |
| 专业 | 200 | 5,000 | $99/月 |
| 企业 | 100,000 | 1,000,000 | $299/月 |
关于
ToolWeb.in - 200+安全API，CISSP和CISM认证，平台：按次付费、API网关、MCP服务器、OpenClaw、RapidAPI、YouTube。
参考
- - Kong路由： https://api.mkkpro.com/compliance/risk-assessment
- API文档： https://api.mkkpro.com:8014/docs
