The 28 Jamf Pro security checks Black Cat runs

Black Cat SSPM evaluates 28 security policies against your Jamf Pro configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect Jamf Pro — what access Black Cat needs, and why.

• Access control & privilege

  3 checks · highest severity: medium

• Encryption, keys & secrets

  3 checks · highest severity: high

• Configuration hardening

  16 checks · highest severity: high

• Lifecycle & offboarding

  3 checks · highest severity: medium

• Governance & compliance

  3 checks · highest severity: low

Access control & privilege (3)

• Local Admin Account On Managed Mac  · severity: medium
• Policy Ongoing Self Service Script  · severity: medium
• API Role Overbroad  · severity: medium

Encryption, keys & secrets (3)

• Computer FileVault Disabled  · severity: high
• Computer FileVault Recovery Key Invalid  · severity: medium
• Local Account FileVault Disabled  · severity: low

Configuration hardening (16)

• Computer SIP Disabled  · severity: high
• Computer Gatekeeper Disabled  · severity: high
• Computer Firewall Disabled  · severity: medium
• Computer Remote Desktop Enabled  · severity: medium
• Computer OS Outdated  · severity: medium
• Computer Recovery Lock Missing  · severity: low
• Computer Secure Boot Reduced  · severity: medium
• Mobile Device Unsupervised  · severity: medium
• Mobile Device Unmanaged  · severity: high
• Mobile Device OS Outdated  · severity: medium
• Configuration Profile User Removable  · severity: medium
• API Integration Long Token Lifetime  · severity: medium
• SSO Not Enabled  · severity: medium
• SSO Bypass Allowed  · severity: medium
• SSO Not Enforced For Enrollment  · severity: low
• SSO Not Enforced For macOS Self Service  · severity: low

Lifecycle & offboarding (3)

• Computer Stale Check-in  · severity: medium
• Computer Activation Lock Enabled  · severity: low
• API Integration Disabled  · severity: info

Governance & compliance (3)

• Configuration Profile Scoped To All Computers  · severity: info
• Policy Disabled  · severity: low
• Policy Scoped To All Computers  · severity: low