contract risk scan