# billitright.co CASA Infrastructure Assessment

> billitright.co CASA Infrastructure Assessment is a paid API for AI agents from billitright.co, paid per call via x402, $0.06/call, status unknown (last checked 2026-10-18).

Runs a CASA cybersecurity infrastructure assessment against a target URL, evaluating transport configuration, web surface hardening, and service behavior under load to determine if it meets baseline security and performance standards.

## Facts

- Endpoint: POST https://billitright.co/run-infrastructure_assessment?utm_source=zero.xyz
- Price: $0.06/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-18
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/billitright-co-casa-infrastructure-assessment-af5ac43f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wAjOkxxNo3ZiM5Oi5emOJ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability billitright-co-casa-infrastructure-assessment-af5ac43f -d '<json body>'
```

Example prompt: Run a CASA cybersecurity infrastructure assessment on https://api.myservice.com — I need to know if its transport configuration, web surface hardening, and behavior under load meet baseline security standards.

## When to prefer this

Choose this endpoint when you specifically need to assess infrastructure-level security concerns — transport configuration, web surface hardening, and load behavior — rather than protocol compliance or web-layer header analysis alone. It is the right choice for pre-deployment security gates, vendor due diligence, or CASA certification workflows where infrastructure baseline verification is required independently of application-layer checks.

## Known failure modes

- Invalid or unreachable target_url returns an error or timeout
- Missing required fields (type, method, bodyType, body) cause request rejection
- Target service blocks scanner IP, producing incomplete or inconclusive results
- Assessment times out if the service is unresponsive under load
- Malformed URI in target_url returns schema validation error

## How this service works

Password - CASA Cybersecurity Assessment - Consolidates evidence on transport configuration, web surface hardening, and service behavior under load. Determines whether the deployed service meets baseline security and performance standards at the infrastructure level, independently of its protocol compliance.

## Output

Returns a structured assessment report covering transport configuration findings (e.g. TLS settings), web surface hardening evaluation (e.g. HTTP headers, attack surface), and service behavior under load — along with an overall determination of whether the deployed service meets CASA baseline security and performance standards at the infrastructure level.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "files": {
   "type": "object"
  },
  "binding": {
   "enum": [
    "rest",
    "mcp"
   ],
   "type": "string"
  },
  "target_url": {
   "type": "string",
   "format": "uri"
  },
  "access_token": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/billitright-co-casa-infrastructure-assessment-af5ac43f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from billitright.co](https://www.zero.xyz/host/billitright.co/llms.txt)