Services in this catalog
- clusters - 4 checks
- organizations - 4 checks
- projects - 2 checks
clusters
4 checks.| Check ID | Title | Severity |
|---|---|---|
clusters_authentication_enabled | Cluster has authentication enabled | CRITICAL |
clusters_backup_enabled | Cluster has backup enabled | HIGH |
clusters_encryption_at_rest_enabled | Cluster has encryption at rest enabled with a supported provider or EBS volume encryption | CRITICAL |
clusters_tls_enabled | Cluster has TLS authentication enabled | HIGH |
organizations
4 checks.| Check ID | Title | Severity |
|---|---|---|
organizations_api_access_list_required | Organization requires API operations to originate from an IP address on the API access list | HIGH |
organizations_mfa_required | Organization requires multi-factor authentication for user access | HIGH |
organizations_security_contact_defined | Organization has a security contact defined | MEDIUM |
organizations_service_account_secrets_expiration | Organization has maximum validity period of 8 hours or less for Admin API Service Account secrets | HIGH |
projects
2 checks.| Check ID | Title | Severity |
|---|---|---|
projects_auditing_enabled | Project has database auditing enabled | MEDIUM |
projects_network_access_list_exposed_to_internet | Project network access list has entries and excludes 0.0.0.0/0, ::/0, 0.0.0.0, and :: | HIGH |
What’s next
Cloud Security overview
Connect a provider, see findings end-to-end.
All checks
Index across every provider.
Compliance frameworks
How check IDs map to SOC 2 / PCI / HIPAA / ISO controls.
Reports
Per-framework PDF scorecards.