On the recordRead 7 Oct 202620 facts
ClosedSSPM
On the record
- AI analysis
- An MCP server lets AI agents analyze scan results and suggest fixes.closedsspm.com · read 7 Oct 2026
- CI/CD integration
- The project provides a GitHub Action and a --fail-on threshold for automated security gates.closedsspm.com · read 7 Oct 2026
- Credential handling
- The security policy says credentials are read from environment variables and are not persisted to disk or config files.github.com · read 7 Oct 2026
- DefectDojo integration
- SARIF reports can be imported into DefectDojo for centralized vulnerability management.github.com · read 7 Oct 2026
- Downloads
- Installation options include Homebrew, platform binaries, Debian and RPM packages, Docker, and building from source.github.com · read 7 Oct 2026
- Installation
- The README lists Homebrew, downloadable binaries, Debian/Ubuntu packages, Red Hat/Fedora packages, Docker, and source builds.github.com · read 7 Oct 2026
- License and maintainer
- The project is licensed under Apache 2.0 and its documentation credits Piotr Mackowski.closedsspm.com · read 7 Oct 2026
- Offline analysis
- Users can save platform snapshots and analyze them later without live access.closedsspm.com · read 7 Oct 2026
- Policy engine
- Security checks use a YAML policy engine that users can customize.closedsspm.com · read 7 Oct 2026
- Project status
- The GitHub repository was archived on September 28, 2026 and is read-only.github.com · read 7 Oct 2026
- Purpose
- ClosedSSPM is an open source tool that audits SaaS platforms for security misconfigurations and provides remediation guidance.closedsspm.com · read 7 Oct 2026
- Read-only operation
- The tool is read-only and does not write to audited SaaS platforms.github.com · read 7 Oct 2026
- Reports
- It generates reports in HTML, JSON, CSV, and SARIF formats.closedsspm.com · read 7 Oct 2026
- Security checks
- The project lists 166 checks across four platforms: 86 for ServiceNow, 55 for Snowflake, 15 for Entra ID, and 10 for Google Workspace.closedsspm.com · read 7 Oct 2026
- Security design
- The security policy says the tool is read-only, does not persist credentials, and uses stdio-only transport for its MCP server.github.com · read 7 Oct 2026
- ServiceNow checks
- ServiceNow audits include 86 checks covering ACLs, roles, scripts, integrations, configuration, users, and static analysis.closedsspm.com · read 7 Oct 2026
- Snapshot handling
- The project warns that collected snapshots may contain sensitive configuration data and should be treated as confidential.github.com · read 7 Oct 2026
- Snapshot sensitivity
- Snapshots may contain sensitive SaaS configuration data and should be treated as confidential.github.com · read 7 Oct 2026
