The 15 PingOne security checks Black Cat runs

Black Cat SSPM evaluates 15 security policies against your PingOne configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect PingOne — what access Black Cat needs, and why.

• Identity, MFA & sign-in

  11 checks · highest severity: high

• Third-party & OAuth apps

  4 checks · highest severity: high

Identity, MFA & sign-in (11)

• User Without MFA  · severity: high
• Disabled User Still Present  · severity: low
• Dormant User  · severity: medium
• Empty Group  · severity: info
• Weak Password Policy  · severity: medium
• Password Policy Without History  · severity: medium
• Password Policy Without Expiry  · severity: low
• Password Policy Low Complexity  · severity: medium
• Sign-On Policy Without MFA  · severity: high
• Default Sign-On Policy Without MFA  · severity: high
• Environment MFA Disabled  · severity: high

Third-party & OAuth apps (4)

• Application Risky Grant Type  · severity: high
• Application Public Client Without Auth  · severity: medium
• Application Wildcard Redirect URI  · severity: medium
• Disabled Application Still Present  · severity: low