The 5 Generic security checks Black Cat runs
Black Cat SSPM evaluates 5 security policies against your Generic configuration on every scan, classifies each finding by risk, and provides remediation steps. Below is the full list, grouped by category.
proxy intel
highLogin from Residential Proxy
Investigate the login source and enforce conditional access or IP allowlists to block residential proxy usage
mediumLogin from Datacenter Proxy
Verify the datacenter IP is from an authorized VPN or cloud egress, and restrict access if not
criticalHigh Confidence Proxy Login
Block the high-confidence proxy IP and require step-up authentication for the affected account immediately
highFailed Login from Proxy
Investigate failed login attempts from proxy IPs for credential stuffing or brute force activity and block the source
criticalAdmin Login from Proxy
Investigate admin proxy login immediately and enforce step-up authentication for all admin accounts