MRCA (Multi-layered Risk Compliance Analyzer) is a risk analysis engine for Moodle.

It scans installed third-party plugins to detect security vulnerabilities, privacy compliance gaps (including General Data Protection Regulation requirements), outdated dependencies, and permission misconfigurations.

MRCA consolidates all findings into a unified Site Risk Index (0–100) and generates actionable alerts, helping administrators proactively manage security and compliance risks.