The embodiment of the application discloses a two-level architecture business system safety inspection method and device. The method comprises the steps of using a headquarters monitoring system to obtain a safety inspection instruction, wherein the safety inspection instruction comprises a weak password inspection instruction and/or a compliance inspection instruction; creating a safety inspection risk message according to the safety inspection instruction, and sending the safety inspection risk message to a branch business system; using the branch business system to execute a corresponding safety inspection script according to the safety inspection risk message, and sending an execution result to the headquarters monitoring system; using the headquarters monitoring system to receive the execution result, and analyzing the execution result, thereby substituting a mode that the headquarters issues the instruction, and the branch carries out the safety inspection artificially and then reports a safety inspection result to the headquarters, enabling the safety inspection of the branch business system to be automatic, real-time and accurate and to have a higher efficiency.