# BillItRight CASA Transport Security Assessment

> BillItRight CASA Transport Security Assessment is a paid API for AI agents from billitright.co, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Performs a CASA cybersecurity assessment of TLS/transport security for a target URL, checking certificate validity, hostname matching, protocol/cipher strength, forward secrecy, and TLS vulnerabilities.

## Facts

- Endpoint: POST https://billitright.co/run-transport_security
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/billitright-casa-transport-security-assessment-b88fa8e8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ipmHHU4H_0wTE2CmYnrOR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability billitright-casa-transport-security-assessment-b88fa8e8 -d '<json body>'
```

Example prompt: Run a CASA transport security assessment on https://api.mycompany.com — I need to know if the TLS certificate is valid, the hostname matches, the protocols and ciphers are strong, forward secrecy is enabled, and whether there are any known TLS vulnerabilities.

## When to prefer this

Choose this endpoint when you need to specifically evaluate the transport-layer (TLS/SSL) security of a web service URL as part of a CASA cybersecurity assessment. It is ideal for pre-deployment security audits, third-party vendor due diligence, and compliance validation workflows where certificate, cipher, protocol, and forward secrecy details are required.

## Known failure modes

- Invalid or unreachable target URL returns an error or empty assessment
- Expired or self-signed certificates may cause connection failures during assessment
- Timeouts if the target server is slow to respond
- Invalid input schema (missing required fields) returns a validation error
- Access token mismatch or missing credentials may block assessment execution

## How this service works

Password - CASA Cybersecurity Assessment - Consolidates evidence on secure communications, including certificate validity, hostname matching, protocol and cipher strength, forward secrecy, and TLS vulnerabilities. It determines whether the service uses a secure, authentic, and correctly configured transport channel.

## Output

Returns a structured assessment of the target URL's transport security posture, including findings on TLS certificate validity, hostname matching, protocol versions in use, cipher suite strength, forward secrecy support, and any detected TLS vulnerabilities, along with an overall determination of whether the transport channel is secure and correctly configured.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "files": {
   "type": "object"
  },
  "binding": {
   "enum": [
    "rest",
    "mcp"
   ],
   "type": "string"
  },
  "target_url": {
   "type": "string",
   "format": "uri"
  },
  "access_token": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/billitright-casa-transport-security-assessment-b88fa8e8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from billitright.co](https://www.zero.xyz/host/billitright.co/llms.txt)