SecurityScorecard

Business appsAPI keyConnection test available

Read a company's security score, factors and score history, manage the portfolios you monitor vendors in, and generate scorecard reports.

OCNORA ships 9 typed SecurityScorecard operations. Each node has a schema-driven form, input and output tables beside its settings, and is pre-flighted by Workflow Health before your first real run. Endpoints not covered by a typed node are called at https://api.securityscorecard.io through the HTTP node with the same credential.

Before you connect SecurityScorecard

Authentication
API key
Credential
the API token, or {"api_token": "…"}
Connection test
Available: the stored credential can be checked against the provider when you add it. This is not a record that a test was run or passed.

What you can do with SecurityScorecard

Operations, grouped by what they do to your data.

A sample SecurityScorecard workflow

  1. 1
    A core trigger
    Start the run from a chat, form, manual, schedule, webhook, workflow trigger — no SecurityScorecard trigger is needed.
  2. 2
    Get Company Factorssecurityscorecard.get_company_factors
    Read a company's per-factor scores and the issue counts behind them.
  3. 3
    Add Company To Portfoliosecurityscorecard.add_company_to_portfolio
    Start monitoring a company by adding its domain to a portfolio.

An outline built from this provider’s node contracts, not a recorded run. Each step’s output fields are available to the next in the field picker.

SecurityScorecard questions

How does OCNORA authenticate with SecurityScorecard?
With a stored API key credential, shaped the API token, or {"api_token": "…"}. A connection test can check it when you add it.
What can I automate with SecurityScorecard?
9 typed operations, each with a reference page listing its config fields and the shapes it emits.
What if the SecurityScorecard operation I need is not listed?
Call https://api.securityscorecard.io from the HTTP node with the same credential, or describe the step to the AI builder, which asks our team for a typed node when one is missing.
Are there templates that use SecurityScorecard?
Not yet. Start from a blank workflow, or describe the workflow to Build with AI.
How are SecurityScorecard calls controlled?
Every call and every run step is audited, runs count against the execution budget, and Workflow Health pre-flights the workflow when you save it.

See your first SecurityScorecard workflow run.

Book a technical demo. We add the connection, pick a template or describe the workflow to Build with AI, and Workflow Health checks it before it runs.