The 27 Grafana security checks Black Cat runs
Black Cat SSPM evaluates 27 security policies against your Grafana configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.
How to connect Grafana — what access Black Cat needs, and why.
Access control & privilege
12 checks · highest severity: high
Data sharing & exposure
3 checks · highest severity: high
Configuration hardening
12 checks · highest severity: high
Access control & privilege (12)
- SSO Disabled severity: high
- Basic Auth Enabled With SSO severity: medium
- Single SSO Provider severity: low
- Excessive Admins severity: medium
- Dormant User severity: medium
- Admin Without Recent Activity severity: high
- Service Account Admin Role severity: high
- Non-Expiring Service Account Token severity: high
- Disabled Service Account With Tokens severity: medium
- Expired Service Account Token severity: medium
- Service Account Token Age Exceeds 180 Days severity: medium
- Folder Without Custom ACL severity: low
Data sharing & exposure (3)
- Overly Permissive Dashboard severity: medium
- Public Dashboard severity: high
- Overly Permissive Folder severity: medium
Configuration hardening (12)
- Direct Access Data Source severity: high
- Data Source Basic Auth severity: medium
- Data Source TLS Skip Verify severity: high
- Data Source With Credentials severity: medium
- No Alert Rules Configured severity: medium
- External Contact Point severity: medium
- Broad Mute Timing severity: high
- Unsigned Plugin severity: high
- Community Plugin severity: low
- Outdated Plugin severity: medium
- Paused Alert Rules severity: medium
- Alert Rules Without Contact Points severity: high