diff --git a/.gitignore b/.gitignore
index 3e74e2ce1..570bd67a1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,3 +29,4 @@ coverage/
 config/web_readme.md
 .tmp/
 *.sqlite
+
diff --git a/package.json b/package.json
index f3c297809..eb435e20d 100644
--- a/package.json
+++ b/package.json
@@ -46,6 +46,7 @@
     "koa-maxrequests": "^1.0.0",
     "koa-middlewares": "^2.1.0",
     "koa-mock": "^1.6.2",
+    "koa-proxy": "^0.9.0",
     "koa-rewrite": "^1.1.2",
     "koa-rt": "^1.0.0",
     "koa-safe-jsonp": "^0.3.1",
diff --git a/servers/registry.js b/servers/registry.js
index aaece3ee4..ba8a7913c 100644
--- a/servers/registry.js
+++ b/servers/registry.js
@@ -20,6 +20,13 @@ var cors = require('kcors');
 var proxyToNpm = require('../middleware/proxy_to_npm');
 var maxrequests = require('koa-maxrequests');
 
+var proxy = require('koa-proxy');
+app.use(proxy({
+  host:  'https://registry.npmjs.org',
+  match: /^\/\-\/npm\/v1\/security\/audits/       
+}));
+
+
 app.use(maxrequests());
 app.use(block());
 middlewares.jsonp(app);
diff --git a/test/controllers/registry/audit.test.js b/test/controllers/registry/audit.test.js
new file mode 100644
index 000000000..0246f7dd7
--- /dev/null
+++ b/test/controllers/registry/audit.test.js
@@ -0,0 +1,111 @@
+'use strict';
+
+var should = require('should');
+var request = require('supertest');
+var pedding = require('pedding');
+var app = require('../../../servers/registry');
+var utils = require('../../utils');
+
+describe('test/controllers/registry/audit.test.js', function () {
+  it('should get /-/npm/v1/security/audits', function (done) {
+    var reqBody = {
+      "name": "demo-npm",
+      "version": "1.0.0",
+      "requires": {
+        "minimatch": "^1.0.0",
+        "moment": "^2.10.5"
+      },
+      "dependencies": {
+        "lru-cache": {
+          "version": "2.7.3",
+          "integrity": "sha1-bUUk6LlV+V1PW1iFHOId1y+06VI="
+        },
+        "minimatch": {
+          "version": "1.0.0",
+          "integrity": "sha1-4N0hILSeG3JM6NcUxSCCKpQ4V20=",
+          "requires": {
+            "lru-cache": "2",
+            "sigmund": "~1.0.0"
+          }
+        },
+        "moment": {
+          "version": "2.22.1",
+          "integrity": "sha512-shJkRTSebXvsVqk56I+lkb2latjBs8I+pc2TzWc545y2iFnSjm7Wg0QMh+ZWcdSLQyGEau5jI8ocnmkyTgr9YQ=="
+        },
+        "sigmund": {
+          "version": "1.0.1",
+          "integrity": "sha1-P\/IfGYytIXX587eBhT\/ZTQ0ZtZA="
+        }
+      },
+      "install": [
+
+      ],
+      "remove": [
+
+      ],
+      "metadata": {
+        "npm_version": "6.0.1",
+        "node_version": "v8.11.2",
+        "platform": "win32"
+      }
+    };
+    request(app)
+      .post('/-/npm/v1/security/audits')
+      .send(reqBody)
+      .expect(200, function (err, res) {
+        res.body.metadata.should.Object()
+        done();
+      });
+  })
+
+  it('should get /-/npm/v1/security/audits/quick', function (done) {
+    var reqBody = {
+      "name": "demo-npm",
+      "version": "1.0.0",
+      "requires": {
+        "moment": "^2.10.5",
+        "minimatch": "^1.0.0"
+      },
+      "dependencies": {
+        "lru-cache": {
+          "version": "2.7.3",
+          "integrity": "sha1-bUUk6LlV+V1PW1iFHOId1y+06VI="
+        },
+        "minimatch": {
+          "version": "1.0.0",
+          "integrity": "sha1-4N0hILSeG3JM6NcUxSCCKpQ4V20=",
+          "requires": {
+            "lru-cache": "2",
+            "sigmund": "~1.0.0"
+          }
+        },
+        "moment": {
+          "version": "2.22.1",
+          "integrity": "sha512-shJkRTSebXvsVqk56I+lkb2latjBs8I+pc2TzWc545y2iFnSjm7Wg0QMh+ZWcdSLQyGEau5jI8ocnmkyTgr9YQ=="
+        },
+        "sigmund": {
+          "version": "1.0.1",
+          "integrity": "sha1-P\/IfGYytIXX587eBhT\/ZTQ0ZtZA="
+        }
+      },
+      "install": [
+        "minimatch@1.0.0"
+      ],
+      "remove": [
+
+      ],
+      "metadata": {
+        "npm_version": "6.0.1",
+        "node_version": "v8.11.2",
+        "platform": "win32"
+      }
+    }
+    request(app)
+      .post('/-/npm/v1/security/audits/quick')
+      .send(reqBody)
+      .expect(200, function (err, res) {
+        res.body.metadata.should.Object()
+        done();
+      });
+  })
+});