Oracle Cloud Security Checks

51+ Oracle Cloud Security Checks

Complete list of Oracle Cloud Infrastructure (OCI) security checks across 13+ services based on CIS OCI Foundations Benchmark v1.2.0, PCI-DSS, HIPAA, SOC 2, and ISO 27001.

Start OCI Scan Oracle CSPM Overview

51+

Security Checks

5+

OCI Services

5+

Compliance Frameworks

v1.2.0

CIS Benchmark

Security Checks by OCI Service

Comprehensive security checks organized by Oracle Cloud service. Click any check for detailed remediation guidance.

Oracle Cloud Identity and Access Management

12 checks

Ensure MFA is enabled for all IAM users

CIS 1.1critical

Ensure API keys are rotated within 90 days

Ensure auth tokens are rotated within 90 days

Ensure customer secret keys are rotated within 90 days

Ensure IAM policies are not overly permissive

Ensure tenancy administrator group is restricted

Ensure IAM password policy requires complexity

Ensure service accounts use instance principals

Ensure federated identity is used where available

Ensure IAM groups are used for policy assignment

Ensure compartments are used for resource isolation

Ensure unused credentials are removed

Oracle Cloud Virtual Cloud Network (VCN)

10 checks

Ensure VCN flow logs are enabled

Ensure security lists do not allow unrestricted SSH

Ensure security lists do not allow unrestricted RDP

Ensure default security list restricts all traffic

Ensure NSGs are used instead of security lists

Ensure Bastion service is used for remote access

Ensure private subnets are used for backend resources

Ensure DRG is used for on-premises connectivity

Ensure service gateway is used for OCI services

Ensure WAF is enabled for public web applications

Oracle Cloud Storage

10 checks

Ensure Object Storage buckets are not public

CIS 3.1critical

Ensure Object Storage buckets have encryption enabled

Ensure Object Storage has versioning enabled

Ensure Object Storage has lifecycle policies

Ensure Object Storage audit events are enabled

Ensure Block Volume backups are configured

Ensure Block Volumes use customer-managed encryption

Ensure Boot Volumes are encrypted

Ensure File Storage exports are restricted

Ensure File Storage uses encryption in transit

Oracle Cloud Compute

10 checks

Ensure compute instances do not have public IPs

Ensure compute instances use shielded instances

Ensure compute instances have monitoring enabled

Ensure legacy IMDS is disabled

Ensure instances use latest operating system images

Ensure custom images are scanned for vulnerabilities

Ensure instance pools have auto-scaling configured

Ensure instances are properly tagged

Ensure dedicated hosts are used where required

Ensure fault domains are used for high availability

Oracle Cloud Database

9 checks

Ensure Autonomous Database uses private endpoints

Ensure database backups are encrypted

Ensure Autonomous Database has Data Guard enabled

Ensure database audit logging is enabled

Ensure TDE is enabled for database encryption

Ensure database connections use TLS

Ensure automatic backups are configured

Ensure database patching is current

Ensure database network access is restricted

Supported Compliance Frameworks

Every check is mapped to relevant compliance framework controls

CIS OCI v1.2.0

PCI-DSS

HIPAA

SOC 2 Type II

ISO 27001:2022

Complete OCI Service Coverage

Security checks across all critical Oracle Cloud Infrastructure services

IAM

VCN

Compute

Object Storage

Block Volume

Boot Volume

Database

Autonomous DB

OKE

Functions

Load Balancer

WAF

Vault

KMS

Audit

Monitoring

Notifications

Events

Logging

File Storage

API Gateway

DNS

Email Delivery

Bastion

Run All 51+ Oracle Cloud Security Checks

Get a comprehensive OCI security assessment in minutes. See all misconfigurations and compliance gaps.

Start OCI Scan Schedule Demo

No credit card required • Free tier available • 14-day trial