CSA STAR Registry Cloud Services Apify Actor

Scrapes the Cloud Security Alliance STAR Registry — a public directory of cloud providers' security/privacy assurance submissions (CAIQ questionnaires, SOC 2-style attestations, certifications, and AI-specific STAR-for-AI assessments) — into clean, structured records for vendor-risk, procurement, and GRC teams.

Use cases

1. Vendor risk assessment — pull the full registry (or a filtered slice) to check whether a prospective cloud vendor has a CAIQ, attestation, or certification on file before onboarding.
2. Compliance monitoring — run on a schedule to detect newly listed providers or changed assurance levels in your vendor stack.
3. Market research — analyze STAR adoption trends (e.g. growth in STAR-for-AI submissions, which providers are CSA Trusted Cloud Providers).

Input

Field	Type	Default	Description
startUrls	array	[{"url": "https://cloudsecurityalliance.org/star/registry"}]	Registry listing page(s) to scrape
maxItems	integer	100	Max number of registry entries to return
fetchDetailPages	boolean	true	Also fetch each entry's own detail page to look for public assessment/supporting-asset document links
delaySeconds	number	1.2	Polite delay before each detail-page request
concurrency	integer	5	How many detail pages to fetch at once

The registry has no server-side pagination — one request to the default URL discovers every listed entry (2,650 as of 2026-08-01); maxItems controls how many of those get enriched and returned, not how many listing requests are made.

Output field table

Field	Type	Description
providerName	string	Organization/cloud provider name
cloudServiceName	string	Name of the specific cloud service listed
descriptionSnippet	string	Provider/service description excerpt
listedSince	string	Date the entry was listed (YYYY-MM-DD)
starFilterTags	array	Registry filter tokens (e.g. star_level_1, caiq, star_for_ai_level_1)
assuranceLabels	array	Human-readable assurance scheme labels (CAIQ, Attestation, Certification, etc.)
isTrustedCloudProvider	boolean	CSA "Trusted Cloud Provider" flag
isStarEnabled	boolean	"STAR Enabled Solution" flag
isStarForAi	boolean	"STAR for AI" flag
listingUrl	string	Absolute URL to the entry's own registry detail page
publicAssessmentLinks	array	Public assessment/supporting-asset document links found on the detail page, when present (often empty)
scrapeTimestamp	string	ISO-8601 UTC scrape time

Example output

{
  "providerName": "2C2P",
  "cloudServiceName": "Payment Gateway Service",
  "descriptionSnippet": "2C2P is a payment service provider that helps companies in emerging markets accept and make payments seamlessly. Over the years, 2C2P has aggregated inter...",
  "listedSince": "2022-12-23",
  "starFilterTags": ["star_level_1", "star_level_2", "caiq", "attestation"],
  "assuranceLabels": ["CAIQ", "Attestation"],
  "isTrustedCloudProvider": false,
  "isStarEnabled": false,
  "isStarForAi": false,
  "listingUrl": "https://cloudsecurityalliance.org/star/registry/2c2p",
  "publicAssessmentLinks": [],
  "scrapeTimestamp": "2026-08-01T08:17:14Z"
}

Pricing

$5 per 1,000 results (Pay-Per-Event, per record).

Results	Estimated cost
100	$0.50
500	$2.50
1,000	$5.00
5,000	$25.00

Notes

• Public data only — no login, no member-only STAR API, no scraping of /special/ or /download/ (both disallowed in robots.txt).
• Detail-page enrichment is best-effort: most registry entries don't expose a separate public assessment/supporting-asset document, so publicAssessmentLinks is frequently an empty array.