The 29 Terraform Cloud security checks Black Cat runs

Black Cat SSPM evaluates 29 security policies against your Terraform Cloud configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect Terraform Cloud — what access Black Cat needs, and why.

• Access control & privilege

  12 checks · highest severity: critical

• Encryption, keys & secrets

  3 checks · highest severity: critical

• Configuration hardening

  11 checks · highest severity: medium

Access control & privilege (12)

• Organization 2FA Not Enforced  · severity: critical
• Organization SAML Not Enabled  · severity: high
• Organization Session Timeout Too Long  · severity: medium
• Team Excessive Permissions  · severity: high
• Team Workspace Admin Access  · severity: medium
• Team Secret Visibility  · severity: low
• User 2FA Not Enabled  · severity: high
• User Pending Invitation  · severity: low
• Sentinel Policy Advisory Only  · severity: medium
• Policy Set Overridable  · severity: high
• Policy Set Not Global  · severity: medium
• Policy Set Empty  · severity: medium

Encryption, keys & secrets (3)

• Variable Not Marked Sensitive  · severity: critical
• Variable Set Global Scope  · severity: medium
• Variable Plaintext Credentials  · severity: critical

Configuration hardening (11)

• Organization Force Delete Allowed  · severity: medium
• Organization Default Execution Mode Local  · severity: low
• Workspace No VCS Connection  · severity: medium
• Workspace Drift Detection Disabled  · severity: low
• Workspace Outdated Terraform Version  · severity: medium
• Variable Set Priority Override  · severity: medium
• Agent Pool Organization Scoped  · severity: medium
• VCS Connection Organization Scoped  · severity: medium
• Run Task Advisory Enforcement  · severity: medium
• Notification No HMAC Token  · severity: medium
• SSH Key Present  · severity: low

Other checks (3)