Reference API Zaxyr

const crypto = require("crypto");
const express = require("express");
const app = express();

app.use(express.json());

const WEBHOOK_SECRET = process.env.ZAXYR_WEBHOOK_SECRET;

function verifySignature(payload, signature) {
  const expected = crypto
    .createHmac("sha256", WEBHOOK_SECRET)
    .update(JSON.stringify(payload))
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

app.post("/webhooks/zaxyr", (req, res) => {
  const signature = req.headers["x-zaxyr-signature"];

  if (!signature || !verifySignature(req.body, signature)) {
    return res.status(401).json({ error: "Invalid signature" });
  }

  const { event, data } = req.body;

  switch (event) {
    case "incident.created":
      console.log("New incident:", data.id, data.severity);
      // Trigger your internal alert pipeline
      break;
    case "assessment.completed":
      console.log("Assessment done:", data.framework, data.score);
      break;
    case "risk.escalated":
      console.log("Risk escalated:", data.id, data.severity);
      break;
    default:
      console.log("Unhandled event:", event);
  }

  res.status(200).json({ received: true });
});

app.listen(3000, () => console.log("Webhook server on port 3000"));

from zaxyr import ZaxyrClient

client = ZaxyrClient(api_key="YOUR_API_KEY")

# Gap analysis ISO 27001
assessment = client.compliance.assess(
    framework="iso-27001",
    include_recommendations=True
)
print(f"Score: {assessment.score}%")

# Chat avec IMY
response = client.ai.chat(
    model="imy-3.2",
    messages=[{"role": "user", "content": "Risques RGPD ?"}]
)
print(response.choices[0].message.content)