The 13 JumpCloud security checks Black Cat runs

Black Cat SSPM evaluates 13 security policies against your JumpCloud configuration on every scan, classifies each finding by risk, and provides remediation steps. Below is the full list, grouped by category.

configuration

mediumDynamic User Group Without Restriction

Review dynamic user groups that auto-add members by query

device

lowSystem Agent Inactive

Investigate systems whose agent is no longer active

encryption

highSystem Full Disk Encryption Disabled

Enforce full disk encryption (FileVault/BitLocker) on managed systems

hardening

highSystem SSH Password Authentication Enabled

Disable SSH password authentication on managed systems

highSystem SSH Root Login Enabled

Disable SSH root login on managed systems

identity

mediumLocally Managed Account Outside SSO

Bring locally managed accounts under directory/SCIM lifecycle

logging

lowNo Recent Directory Insights Events

Confirm Directory Insights is producing audit events

mfa

highUser Without MFA

Enroll JumpCloud users in multi-factor authentication

mediumSystem MFA Not Required At Login

Require MFA at system (device) login

password policy

mediumPassword Never Expires

Apply a password-expiration policy to JumpCloud users

privilege

criticalSudo User Without MFA

Require MFA for users with sudo/administrative rights

criticalPasswordless Sudo Enabled

Disable passwordless sudo on JumpCloud users

sso

lowSSO Application Without SSO Configured

Confirm published applications enforce SSO