risk-score compliance scanner