# RiskRecon

**Canonical:** https://apis.io/providers/riskrecon/  
**Website:** https://www.riskrecon.com  
**APIs profiled:** 1

RiskRecon by Mastercard is a third-party and supply-chain cyber risk management platform that continuously assesses, rates, and monitors the cybersecurity posture of an organization and its vendor ecosystem. It produces objective, automated security ratings across dozens of security criteria, prioritizes findings by asset value and issue severity, and lets teams tune assessments to their own risk appetite. RiskRecon exposes a REST API (api.riskrecon.com) so customers can programmatically pull portfolio ratings, toe (target-of-evaluation) analyses, findings, and evidence into their own GRC, TPRM, and security workflows. Originally venture backed by Accel and others, RiskRecon was acquired by Mastercard and now operates as RiskRecon by Mastercard.

## Kin Score — 21.3 / 100 (emerging)

Scored 2026-08-19 under rubric 0.12.0. Trend: flat (-3.6 from 24.9).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 47.6 |
| Commercial Clarity | 21.1 |
| Access Clarity | 21.1 |

## Agent readiness — 12.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **RiskRecon API** — RiskRecon REST API for programmatic access to security ratings, portfolio and toe (target-of-evaluation) analyses, findings, and evidence. Authenticated with a JWT bearer token....

## Security (2)

- **Riskrecon Authentication** — http · 1 scheme
- **Riskrecon Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Tags

Company, Cybersecurity, Security Ratings, Third Party Risk, Supply Chain Risk, Risk Management, GRC, Vendor Monitoring, Attack Surface

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/riskrecon/). Scores are computed from the provider's own public artifacts under a published rubric.