# kosa8 cloud security

Show the organization's security checklist and how many checks pass

Each check is read from the organization's own settings, keys and audit log:
single sign-on, verified domains, roles, API key age and use, the spending cap,
the audit chain and whether the audit log leaves kosa8 (export or SIEM). The score
is passed/total. It is a self-check, not a certification or an audit.
Needs an admin key or one with audit:read.

---
Source: https://docs.kosa8.com/reference/cloud-security/