Keycloak Resources

Query Keycloak for realms and their brute force protection, password policy, and token lifespans, clients and their grant flows, client scopes, and protocol mappers, users, groups, and roles, identity providers and user federation components, authentication flows and required actions, realm signing keys, and event logging configuration. Use cnspec to find public clients with wildcard redirect URIs and realms that leave brute force protection off, and assess Keycloak against Mondoo Platform policies.

Learn how to secure Keycloak with cnspec.