The 49 Anthropic security checks Black Cat runs

Black Cat SSPM evaluates 49 security policies against your Anthropic configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect Anthropic — what access Black Cat needs, and why.

• Access control & privilege

  31 checks · highest severity: high

• Data sharing & exposure

  4 checks · highest severity: high

• Logging & audit

  4 checks · highest severity: high

• Configuration hardening

  7 checks · highest severity: medium

• Governance & compliance

  3 checks · highest severity: medium

Access control & privilege (31)

• Excessive Org Admins  · severity: medium
• Unscoped Admin  · severity: high
• Managed User Review  · severity: low
• Admin Redundancy Missing  · severity: high
• Dormant Member  · severity: medium
• Stale API Key  · severity: high
• Unscoped API Key  · severity: medium
• Inactive API Key Not Removed  · severity: low
• API Key Created By Non-User  · severity: medium
• Stale Invite  · severity: low
• Expired Invite Not Cleaned  · severity: low
• Admin Invite Pending Review  · severity: medium
• Excessive Workspace Admins  · severity: medium
• Workspace Single Admin  · severity: high
• API Key Expired Or Expiring  · severity: high
• API Key No Expiration  · severity: medium
• Claude Code User Not In Workspace  · severity: medium
• Claude Code User Role Review  · severity: low
• Claude Code Commits Without Pull Requests  · severity: medium
• Unscoped API Usage  · severity: medium
• Claude SSO Not Enforced  · severity: high
• Claude SSO Provisioning Not Required  · severity: medium
• Claude No Active IP Allowlist  · severity: low
• Claude Excessive Session Duration  · severity: low
• Compliance Key Has Delete Scope  · severity: high
• Deactivated Compliance Key Still Listed  · severity: low
• Compliance Key Stale  · severity: medium
• Claude Admin Sprawl  · severity: medium
• Claude Empty Group  · severity: low
• Claude Custom Role Broad Connector Access  · severity: high
• Compliance Key No Expiry  · severity: low

Data sharing & exposure (4)

• Claude Retention Set To Indefinite  · severity: medium
• Claude Content Redaction Disabled  · severity: medium
• Claude Code Execution Egress Open  · severity: medium
• Secret Detected In Claude Conversation  · severity: high

Logging & audit (4)

• Claude Role Permissions Not Observable  · severity: low
• Claude Sign-In Failure Spike  · severity: high
• Claude Inference Hook Denials Spike  · severity: medium
• Claude Admin Settings Churn  · severity: medium

Configuration hardening (7)

• Archived Workspace Not Deleted  · severity: low
• Stale Workspace  · severity: low
• Usage Spike Detected  · severity: medium
• Workspace Default Rate Limits  · severity: medium
• Web Search Tool Usage  · severity: medium
• Claude Code High Session Count  · severity: low
• Rate Limit High Requests Per Minute  · severity: medium

Governance & compliance (3)

• Cost Anomaly Detected  · severity: medium
• Workspace No Data Residency  · severity: medium
• High Daily Spend  · severity: medium