The 28 GitLab security checks Black Cat runs
Black Cat SSPM evaluates 28 security policies against your GitLab configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.
How to connect GitLab — what access Black Cat needs, and why.
Identity, MFA & sign-in
4 checks · highest severity: critical
Access control & privilege
9 checks · highest severity: critical
Data sharing & exposure
5 checks · highest severity: high
Configuration hardening
10 checks · highest severity: high
Identity, MFA & sign-in (4)
- Group 2FA Not Enforced severity: critical
- Group 2FA Grace Period Too Long severity: medium
- Member Without 2FA severity: high
- Group Owner Without 2FA severity: critical
Access control & privilege (9)
- Group Membership Unlocked severity: medium
- Project Merge Approvals Disabled severity: critical
- Project Branch Protection Disabled severity: critical
- Project Force Push Allowed severity: high
- Project No Code Owner Approval severity: medium
- Deactivated Member Not Removed severity: low
- Pending Invitation Not Accepted severity: low
- Group Subgroup Creation Permissive severity: medium
- Blocked Member Not Removed severity: medium
Data sharing & exposure (5)
- Group Public Visibility severity: high
- Group Sharing Unlocked severity: medium
- Group Forking Allowed Outside severity: high
- Group Sharing Outside Organization severity: high
- Public Project severity: medium
Configuration hardening (10)
- Group No IP Restriction severity: medium
- Project Container Scanning Disabled severity: medium
- Project Discussions Not Required severity: medium
- Active Runner Offline severity: low
- Integration Insecure URL severity: high
- No Compliance Framework severity: low
- Project Pipeline Not Required severity: high
- Runner Not Locked to Project severity: low