[{"_1":2,"_219":-5,"_220":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_189":190},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_95":96,"_121":122,"_182":-5,"_183":11,"_184":17,"_185":11,"_186":-5,"_187":188},"canonicalUrl","https://hub.docker.com/r/acuvity/risk-auditor/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","acuvity","reponame","risk-auditor","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_49":50,"_52":53,"_54":55,"_56":11,"_57":58,"_59":60,"_61":62,"_39":31,"_28":29,"_64":65,"_66":51,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":68,"_75":76,"_77":11,"_78":79,"_80":81,"_86":11,"_87":88,"_92":29,"_93":94},"categories",[38,43,46],{"_39":40,"_41":42},"name","Networking","slug","networking",{"_39":44,"_41":45},"Security","security",{"_39":47,"_41":48},"Machine learning & AI","machine-learning-and-ai","content_types",[51],"image","date_registered","2025-08-13T16:52:46.532307Z","description","Acuvity Risk Assessment Tool","is_private","last_updated","2026-01-22T17:51:03.333285Z","last_modified","2025-10-28T18:37:04.495059Z","media_types",[63],"application/vnd.oci.image.index.v1+json","pull_count",9454,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n \n \n $\"Acuvity$ \n \n \n

\n \n $\"Join$ \n \n\n $\"Follow$ \n \n\n $\"Follow$ \n \n

\n\n# 🔍 What is Acuvity Risk Auditor?\n\n**Description:** Comprehensive risk assessment tool for AI services with advanced reachability checks and security log processing\n\nPackaged by Acuvity for risk auditing in customer environments. Features automated browser testing, TLS certificate analysis, and security log processing capabilities.\n\n# 💡 Why We Built This\n\nAt [Acuvity](https://acuvity.ai), understanding AI service accessibility and security posture is critical for our mission. The Acuvity Risk Auditor addresses this need by providing comprehensive risk auditing with optional security log correlation for AI services across customer networks.\n\n# 📚 Quick reference\n\n**Maintained by**:\n - [the Acuvity team](mailto:support@acuvity.ai) for packaging and security\n\n**Where to get help**:\n - [Acuvity Support](mailto:support@acuvity.ai)\n\n**Supported host architectures**:\n - `amd64` - natively\n - `arm64` - via emulation with `--platform linux/amd64`, chrome browser which is required for advanced tests doesn't have build for arm64 linux\n\n**Current supported version:**\n - container: `latest`\n\n---\n\n# Table of Contents\n- [🚀 Quickstart](#-quickstart)\n- [🎯 Usage Modes](#-usage-modes)\n- [🐳 Run it with Docker](#-run-it-with-docker)\n - [Mount Structure](#mount-structure)\n - [⚙️ Command Line Options](#️-command-line-options)\n - [📋 Examples](#-examples)\n - [Acuvity Knowledge Base Scanning](#acuvity-knowledge-base-scanning)\n - [Direct Domain Scanning](#direct-domain-scanning)\n - [Security Log Processing](#security-log-processing)\n - [Custom CA Certificates](#custom-ca-certificates)\n - [🔧 Advanced Configuration](#-advanced-configuration)\n - [📁 Output Files](#-output-files)\n- [📝 Security Log Processing](#-security-log-processing)\n- [🔑 Environment Variables](#-environment-variables)\n\n---\n\n# 🚀 Quickstart\n\n> [!NOTE] \n> You can get your token on Acuvity console in Administration/Access/User Tokens.\n\n```bash\n# Set your Acuvity API token as environment variable first\nexport ACUVITY_TOKEN=\"your-token-here\"\n\n# Create directory structure\nmkdir -p ./data/{input,output,logs}\n\n# Optionally copy your security logs to input directory\ncp your_security_logs.csv ./data/input/\n\n# Run complete scan with security log processing and file output, leave out --security-log option if no logs are available\ndocker run --platform linux/amd64 --rm \\\n -v \"$(pwd)/data:/app/data\" \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --security-log /app/data/input/your_security_logs.csv \\\n --output-dir /app/data/output \\\n --log-file /app/data/logs/auditor.log\n```\n\nThis example will:\n- Scan domains from Acuvity's knowledge base + specified custom domains\n- Process your security logs for correlation\n- Save detailed results to `./data/output/`\n- Generate debug logs in `./data/logs/`\n\n# 🎯 Usage Modes\n\nThe auditor supports three main operational modes which can be combined together. Results are automatically uploaded to Acuvity platform.\n\n\n### Acuvity Knowledge Base Scanning\n\nScan domains from Acuvity's AI domains database.\n\n### Direct Domain Scanning\n\nScan specific domains on top of domains from Acuvity's database. Use `--domains` to specify which domains to test.\n> [!NOTE] \n> If the domain is not in Acuvity Knowledge Base, it will still be part of the audit report, but the security risk assessment will not be available.\n\n### Security Log Processing\n\nProcess security logs to correlate with AI domain usage. Supports CSV format with automatic URL extraction. Have to be combined with either direct domains or Acuvity Knowledge Base domains.\n\n\n# 🐳 Run it with Docker\n\n## Mount Structure\n\nThe container uses `/app/data` as the main data directory. Create the following local directory structure based on the features you want to use.\n\n```bash\nmkdir -p ./data/{input,output,logs,certs}\n```\n\n- `./data/input/` - Security log file\n- `./data/output/` - Scan results\n- `./data/logs/` - Application log files for debugging\n- `./data/certs/` - Custom CA certificates (PEM format) to install in container if needed\n\n\n## ⚙️ Command Line Options\n\nThe auditor supports the following key options:\n\n**Custom Domain Sources:**\n- `--domains domain1.com domain2.com` - Scan specific domains directly\n\n**Input/Output:**\n- `--output-dir /path/to/output` - Save results to directory (enables file persistence)\n- `--security-log /path/to/security.csv` - Process security log file for correlation\n\n\n**Testing Control:**\n- `--timeout 15` - Network timeout in seconds (default: 10)\n- `--skip-advanced-tests` - Disable browser-based testing\n\n**Logging:**\n- `--log-level DEBUG` - Set logging level (DEBUG, INFO, WARNING, ERROR)\n- `--log-file /path/to/auditor.log` - Save logs to file\n\n**Metadata:**\\\nIn metadata you can specify any number of key=value pairs:\n- `--metadata location=US team=QA`\n\n\n## 📋 Examples\n\n\n\n### Acuvity Knowledge Base Scanning\n\n```bash\n# Set your Acuvity API token as environment variable first\nexport ACUVITY_TOKEN=\"your-token-here\"\n\n# Acuvity Knowledge Base scan with console output (no mounts needed)\ndocker run --platform linux/amd64 --rm \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest\n\n# Acuvity Knowledge Base scan with file output\nmkdir -p ./data/output\ndocker run --platform linux/amd64 --rm \\\n -v \"$(pwd)/data:/app/data\" \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --output-dir /app/data/output\n```\n\n### Direct Domain Scanning\n\n```bash\n# Set your Acuvity API token as environment variable first\nexport ACUVITY_TOKEN=\"your-token-here\"\ndocker run --platform linux/amd64 --rm \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --domains chatgpt.com openai.com anthropic.com\n\n\n# Scan with file output and logging\nexport ACUVITY_TOKEN=\"your-token-here\"\nmkdir -p ./data/{output,logs}\ndocker run --platform linux/amd64 --rm \\\n -v \"$(pwd)/data:/app/data\" \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --domains chatgpt.com openai.com anthropic.com \\\n --output-dir /app/data/output \\\n --log-file /app/data/logs/auditor.log\n\n```\n\n### Security Log Processing\n\n```bash\n# Prepare security log file\nmkdir -p ./data/input\ncp your_security_logs.csv ./data/input/\n\n# Process security logs with Acuvity Knowledge Base domains (set token first)\nexport ACUVITY_TOKEN=\"your-token-here\"\nmkdir -p ./data/{input,output}\ndocker run --platform linux/amd64 --rm \\\n -v \"$(pwd)/data:/app/data\" \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --security-log /app/data/input/your_security_logs.csv \\\n --output-dir /app/data/output\n\n# Process security logs with specific domains\nexport ACUVITY_TOKEN=\"your-token-here\"\ndocker run --platform linux/amd64 --rm \\\n -v \"$(pwd)/data:/app/data\" \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --security-log /app/data/input/your_security_logs.csv \\\n --domains chatgpt.com openai.com anthropic.com \\\n --output-dir /app/data/output \\\n\n```\n\n### Custom CA Certificates\n\n```bash\n# Copy CA certificates to local certs directory\ncp /path/to/your/ca-certificates/*.pem ./data/certs/\n\n# Run with custom CA certificates\nexport ACUVITY_TOKEN=\"your-token-here\"\ndocker run --platform linux/amd64 --rm \\\n -v \"$(pwd)/data:/app/data\" \\\n -e ACUVITY_TOKEN \\\n acuvity/risk-auditor:latest \\\n --domains internal-domain.com \\\n --output-dir /app/data/output\n\n```\n\n## 🔧 Advanced Configuration\n\n### Custom CA Certificate Support\n\nFor environments with custom certificate authorities, place PEM files in `./data/certs/` and the auditor will automatically install them in the container.\n\n## 📁 Output Files\n\nThe auditor generates the following output files in the specified output directory:\n\n- `results_.json`: Main scan results in JSON format\n- `payload_.json`: API payload format results\n\n# 📝 Security Log Processing\n\n## Supported Log Formats\n\nThe auditor can process security logs in various CSV formats:\n\n- **Flexible Column Detection**: Automatically tries to detect timestamp, URL, and user columns \n- **Best-effort URL Extraction**: Uses regex patterns to find URLs in any text content\n- **Subdomain Matching**: Automatically matches subdomains to parent domains\n\nWhile some common header names can be automatically detected, for best results the log header names should be set to `timestamp`, `username` and `destination_url` for the URL the user was trying to reach. The log can contain any additional columns which will be ignored.\n\n## URL Matching Logic\n\nExamples of subdomain matching:\n- `https://files01.api.chatgpt.com/uploads` matches domain: `chatgpt.com`\n- `https://api.openai.com/v1/chat` matches domain: `openai.com`\n- `https://claude.ai/chat` matches domain: `claude.ai`\n\n## Sample Security Log Format\n\n```csv\ntimestamp,source_ip,destination_url,username,action\n2024-01-15T10:30:00Z,192.168.1.100,https://chatgpt.com/chat,john.doe,ALLOW\n2024-01-15T10:31:00Z,192.168.1.101,https://api.openai.com/v1/completions,jane.smith,ALLOW\n```\n\n# 🔑 Environment Variables\n\n**Required for Acuvity Knowledge Base scanning and uploads**:\n- `ACUVITY_TOKEN`: Bearer authentication token (required)\n- `ACUVITY_BASE_URL`: API base URL - override option, by default it is extracted from token\n- `ACUVITY_NAMESPACE`: Namespace header value - override option, by default it is extracted from token","has_starred","hub_user","chrisacuvity","immutable_tags_settings",{"_82":11,"_83":84},"enabled","rules",[85],".*","is_automated","permissions",{"_89":17,"_90":11,"_91":11},"read","write","admin","user","storage_size",5975416359,"orgData",{"_97":98,"_99":100,"_101":102,"_103":29,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":115,"_116":117,"_118":119,"_120":17},"id","136563be7dbc49ddbe7cce2b16d857a2","uuid","136563be-7dbc-49dd-be7c-ce2b16d857a2","type","organization","orgname","full_name","Acuvity","location","Sunnyvale ","company","Acuvity Inc.","profile_url","https://www.acuvity.ai","date_joined","2023-09-07T21:24:49.932756Z","gravatar_url","https://www.gravatar.com/avatar/a8486cbfb368141655f23b5009df016f?s=80&r=g&d=mm","gravatar_email","","badge","verified_publisher","is_active","recentTags",[123,166],{"_124":51,"_125":126,"_127":128,"_129":130,"_97":131,"_132":133,"_57":155,"_156":126,"_157":29,"_158":63,"_39":159,"_160":161,"_162":140,"_163":155,"_164":72,"_165":17},"content_type","creator",23105788,"digest","sha256:6c9de0517896e60480e47ff439903650dec78df5a6517b9fa8e817e842364467","full_size",569611479,953636661,"images",[134,149],{"_135":136,"_127":137,"_138":117,"_139":140,"_141":142,"_143":144,"_145":117,"_146":-5,"_147":130,"_69":72,"_148":-5},"architecture","amd64","sha256:97189cd6e9bdb2014d0b214966ae5096d7f33b6dc62268e6bf7b2a2447d1c185","features","last_pulled","2026-09-19T22:06:59.41177904Z","last_pushed","2026-01-22T17:51:00.403613315Z","os","linux","os_features","os_version","size","variant",{"_135":150,"_127":151,"_138":117,"_139":152,"_141":153,"_143":150,"_145":117,"_146":-5,"_147":154,"_69":72,"_148":-5},"unknown","sha256:c8a0a2f141c107c7432252e2d1709f761650294fee4da2bbec7c9460275ae827","2026-09-19T17:14:25.967685644Z","2026-01-22T17:51:00.399082714Z",1190,"2026-01-22T17:51:02.134858Z","last_updater","last_updater_username","media_type","latest","repository",28288754,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_124":51,"_125":126,"_127":167,"_129":168,"_97":169,"_132":170,"_57":180,"_156":126,"_157":29,"_158":63,"_39":181,"_160":161,"_162":173,"_163":180,"_164":72,"_165":17},"sha256:bb0e5c40a858d405a97a68d7b5f6a9225ee10afc737a61c5f456722f0e2455f4",569137379,975122209,[171,175],{"_135":136,"_127":172,"_138":117,"_139":173,"_141":174,"_143":144,"_145":117,"_146":-5,"_147":168,"_69":72,"_148":-5},"sha256:d8033ebd4f8ce9b0a630bd553d11151ad5488ecd625515c8dce76e805d4c743e","2026-09-19T22:07:00.338565122Z","2025-09-18T17:48:17.755398596Z",{"_135":150,"_127":176,"_138":117,"_139":177,"_141":178,"_143":150,"_145":117,"_146":-5,"_147":179,"_69":72,"_148":-5},"sha256:36ad51f009c2d81992ab836083a16e977f7f4edbc799e5e9f4ac653c325a87f6","2026-09-19T01:07:43.228573409Z","2025-09-18T17:48:17.731547458Z",1189,"2025-09-18T17:48:18.992323Z","test","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":191,"_201":202,"_187":217,"_218":11},{"_36":192,"_49":196,"_52":53,"_54":55,"_56":11,"_57":58,"_59":60,"_61":197,"_39":31,"_28":29,"_64":65,"_66":51,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":68,"_75":76,"_77":11,"_78":79,"_80":198,"_86":11,"_87":200,"_92":29,"_93":94},[193,194,195],{"_39":40,"_41":42},{"_39":44,"_41":45},{"_39":47,"_41":48},[51],[63],{"_82":11,"_83":199},[85],{"_89":17,"_90":11,"_91":11},"tags",{"_203":204,"_205":-5,"_206":-5,"_207":208},"count",2,"next","previous","results",[209,213],{"_124":51,"_125":126,"_127":128,"_129":130,"_97":131,"_132":210,"_57":155,"_156":126,"_157":29,"_158":63,"_39":159,"_160":161,"_162":140,"_163":155,"_164":72,"_165":17},[211,212],{"_135":136,"_127":137,"_138":117,"_139":140,"_141":142,"_143":144,"_145":117,"_146":-5,"_147":130,"_69":72,"_148":-5},{"_135":150,"_127":151,"_138":117,"_139":152,"_141":153,"_143":150,"_145":117,"_146":-5,"_147":154,"_69":72,"_148":-5},{"_124":51,"_125":126,"_127":167,"_129":168,"_97":169,"_132":214,"_57":180,"_156":126,"_157":29,"_158":63,"_39":181,"_160":161,"_162":173,"_163":180,"_164":72,"_165":17},[215,216],{"_135":136,"_127":172,"_138":117,"_139":173,"_141":174,"_143":144,"_145":117,"_146":-5,"_147":168,"_69":72,"_148":-5},{"_135":150,"_127":176,"_138":117,"_139":177,"_141":178,"_143":150,"_145":117,"_146":-5,"_147":179,"_69":72,"_148":-5},[],"canDeleteTags","actionData","errors"]

acuvity/risk-auditor

Tags for acuvity/risk-auditor