---
title: "Assist Security Audit"
method: POST
path: "/assist/security-audit"
tags: ["assist"]
---

# Assist Security Audit

`POST /assist/security-audit`

## Request

- Base URL: `https://api.xeorank.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.xeorank.com/assist/security-audit`
- Auth: API key in header `X-Agent-Key`

Read-only WordPress security posture audit of a connected site: core-version
currency, plugin/theme inventory, user-enumeration exposure, XML-RPC, version-
leak files, missing security headers, and directory listing. Returns a graded,
severity-ranked report with fixes. No wp-cli/SSH needed (works on plugin sites);
no page changes. Known-plugin-CVE cross-reference is planned.

## Query parameters

- `email` string, nullable

## Request body

- SecurityAuditBody
  - `site_id` string, required

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/xeorank/apis/seo-intelligence-engine.md) · [All operations](https://skmtc.dev/xeorank/apis/seo-intelligence-engine/llms.txt) · [OpenAPI document](https://skmtc.dev/xeorank/apis/seo-intelligence-engine/revisions/449a3fd73454?raw)