Find security control coverage gaps API

Compare supplied security requirements with declared controls and evidence. Report requirements with no matching control or with matching controls that lack evidence. No cloud account is queried.

The Find security control coverage gaps operation is part of the Payload Safety & Architecture Control Checks API on BRAINIAC.software. Compare supplied security requirements with declared controls and evidence. Report requirements with no matching control or with matching controls that lack evidence. No cloud account is queried. It is exposed as POST /api/v1/security/security-control-coverage-gap and priced at $0.04 USDC on Base. Payment uses the x402 exact scheme: an unpaid call returns HTTP 402 with payment requirements; after paying the exact USDC amount, retry the same request with a payment-signature header and Idempotency-Key. No account and no API key are required. Data sources for this product: Caller-supplied payloads, components, zones, flows, controls, requirements, and evidence processed locally Limitations: A pattern match or architecture gap is not proof of an exploit, and a clean result is not a guarantee of safety. No network call is made and nothing is written to disk. Trust, data-flow, and coverage checks use only the architecture and requirements in the request. Outputs are compliance prechecks, drafts, or data lookups for human review. They are not official determinations, legal advice, identity confirmation, or certified filings. Related operations in this group include Score payload anomaly and input safety, Detect trust-boundary violations, Audit sensitive data flows. Open the group documentation for the full request schema, field notes, and response examples before integrating.

POST$0.04 USDC
/api/v1/security/security-control-coverage-gap

Example request

curl -i -X POST "https://www.brainiac.software/api/v1/security/security-control-coverage-gap" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "requirements": [
    {
      "id": "req-1",
      "text": "Encrypt data in transit to the API",
      "required_control_kinds": [
        "encryption_in_transit"
      ],
      "component_ids": [
        "api"
      ]
    },
    {
      "id": "req-2",
      "text": "Authenticate API callers",
      "required_control_kinds": [
        "authentication"
      ],
      "component_ids": [
        "api"
      ],
      "evidence_required": true
    }
  ],
  "controls": [
    {
      "id": "ctl-1",
      "kind": "authentication",
      "component_ids": [
        "api"
      ]
    }
  ],
  "components": [
    {
      "id": "api",
      "zone_id": "trusted"
    }
  ],
  "zones": [
    {
      "id": "trusted",
      "trust_level": 70
    }
  ],
  "evidence": []
}
JSON

An unpaid probe returns HTTP 402 with x402 payment requirements. After paying the exact USDC amount on Base, retry the identical request with a payment-signature header.

FAQ

  • Do I need an API key? No. Pay the listed USDC amount with x402.
  • What network? Base (eip155:8453), USDC.
  • Is this an official determination? No. Results are for human review against the cited sources.

Related APIs

Payload Safety & Architecture Control Checks APIFull docsHow it works