`cybros audit`

An npm audit-style security posture summary: your compliance scores, your AI-security checks, and the latest scan's findings — in one command.

Synopsis

cybros audit [OPTIONS]

With no options it reports org-wide posture. Scope it to a scan or repository to tie the numbers to a specific point in time.

Options

Flag	Default	Description
`--scan`	—	Scope the posture report to a specific scan id.
`--repo`	—	Scope to a repository (uses its latest scan).

Plus the global flags: --json, --api-url, --no-color.

Examples

Org-wide posture

cybros audit

╭─ Security posture ───────────────────────────╮
│ Overall compliance score: 86%                │
╰───────────────────────────────────────────────╯
              Compliance frameworks
┏━━━━━━━━━━━━━━━┳━━━━━━━┳━━━━━━┳━━━━━━┓
┃ Framework     ┃ Score ┃ Pass ┃ Fail ┃
┡━━━━━━━━━━━━━━━╇━━━━━━━╇━━━━━━╇━━━━━━┩
│ SOC 2  2017   │  88%  │  61  │  8   │
│ ISO 27001 2022│  84%  │  72  │ 14   │
└───────────────┴───────┴──────┴──────┘
               AI-security checks
┏━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━┳━━━━━━━━━┓
┃ Check             ┃ OWASP LLM ┃ Result  ┃
┡━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━╇━━━━━━━━━┩
│ Prompt injection  │ LLM01     │ FAIL (2)│
│ Insecure output   │ LLM02     │ PASS    │
└───────────────────┴───────────┴─────────┘
AI stack detected: yes   Checks failed: 1/8

Scope to a specific scan

cybros audit --scan scan_8a1b...

When scoped to a scan (directly or via --repo's latest scan), the report also prints that scan's severity breakdown and risk score.

Machine-readable

cybros --json audit --repo repo_2f9c... | jq '{
  score: .compliance.overall_score,
  ai_failed: .ai_security.summary.checks_failed
}'

The JSON payload has three top-level keys: compliance, ai_security, and report (the latter is null when no scan is in scope), plus scan_id.

Exit codes

Code	When
`0`	Posture fetched.
`1`	An API error.
`2`	Not authenticated.

cybros audit