{"uid":"cap_h1W6kYBkdl4S1CEnxCYq-","slug":"billitright-casa-web-security-findings-assessment-aa409f3c","name":"BillitRight CASA Web Security Findings Assessment","description":"Password - CASA Cybersecurity Assessment - Groups web-layer security issues involving HTTP headers, caching, browser protections, resource policies, and response exposure. It complements transport and functional testing by evaluating application hardening and the security of the exposed web surface.","url":"https://billitright.co/run-web_security_findings?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"files":{"type":"object"},"binding":{"enum":["rest","mcp"],"type":"string"},"target_url":{"type":"string","format":"uri"},"access_token":{"type":"string"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.025","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":{"p10Cents":"2.5000","medianCents":"2.5000","p90Cents":"2.5000","minCents":"2.5000","maxCents":"2.5000","p95Cents":"2.5000","sampleCount":1,"varies":false,"failureChargeRate":1},"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.025/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.025","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.025","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_k1zyMi_KnmCVoLD7mK4Fq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.025","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Evaluates web-layer security hardening of a target URL, checking HTTP headers, caching policies, browser protections, resource policies, and response exposure.","exampleAgentPrompt":"Can you run a CASA web security findings assessment on https://myapp.example.com to check for HTTP header issues, caching misconfigurations, browser protections, and response exposure problems?","exampleUseCases":[{"title":"Pre-launch security hardening check","prompt":"Before we go live, can you assess https://staging.myproduct.com for web-layer security issues — things like missing security headers, unsafe caching, and any sensitive data leaking in HTTP responses?"},{"title":"Compliance audit for client web app","prompt":"I need to run a CASA cybersecurity web security assessment on https://client-portal.example.com to check their HTTP headers, browser protections, and resource policies — can you do that and give me the findings?"},{"title":"Investigate reported security misconfiguration","prompt":"We got a report that our API at https://api.myservice.io might have CORS or caching misconfigurations — can you run a web security findings scan on it to identify the issues?"}],"resultDescription":"Returns structured web security findings covering HTTP header configuration, caching policy evaluation, browser protection status (e.g. X-Frame-Options, CSP, HSTS), resource policy analysis (e.g. CORS), and response exposure indicators — surfacing specific misconfigurations or missing hardening controls on the assessed URL.","failureModes":["Invalid or unreachable target_url returns an error or empty findings","Malformed URI format causes schema validation failure","Target URL behind authentication returns incomplete results without a valid access_token","Timeout if the target URL is slow to respond","Rate limiting or payment failure if USDC balance is insufficient"],"whenToPreferThis":"Choose this endpoint when you need to specifically evaluate web-layer application hardening — HTTP headers, caching, browser protections, CORS/resource policies, and response exposure — as part of a CASA cybersecurity assessment. It complements transport-layer and functional compliance tests offered by sibling endpoints on billitright.co. Prefer it when you want targeted web surface security findings rather than a full combined assessment.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-18T18:39:09.296Z","isFirstParty":false,"canonicalSlug":"billitright-casa-web-security-findings-assessment-aa409f3c"}