• GAP ANALYSIS
  • AUDIT READY
  • REMEDIATION
  • HUMAN ACTION

How to verify security compliance with your AI

Connect Kandji to your agent to audit device configurations against your specific security standards.

Ask AI about this page

Short answer

How can I check my fleet's security compliance using AI?

Your agent pulls your current Kandji blueprints and security parameters to identify where your devices deviate from your required standards. You'll get a clear view of which machines are out of spec and which settings need fixing.

Compliance outcomes

Where gaps are found

The AI maps your current setup against your security requirements.

GAP ANALYSIS

Identify misconfigured devices

The agent compares active device settings against your blueprints to find any mismatches.

AUDIT READY

Generate compliance reports

Get a summary of which security parameters are met and which are failing across your fleet.

REMEDIATION

Pinpoint required fixes

The AI flags the exact settings that need to change to bring a device back into compliance.

HUMAN ACTION

Manual policy updates

The agent identifies the gaps, but you still handle the actual changes to your Kandji policies.

The workflow

What your AI does when the request arrives.

The agent acts as an auditor, scanning your Kandji environment for discrepancies.

  1. Fetch blueprints

    The agent retrieves all existing device blueprints from your Kandji account to understand your intended security posture.

    list_blueprints
  2. Scan parameters

    It pulls the specific security parameters defined in your environment to use as a baseline for comparison.

    list_parameters
  3. Compare configurations

    The agent cross-references the retrieved blueprints and parameters against the actual state of your fleet.

    list_blueprintslist_parameters
  4. Report deviations

    The AI summarizes every instance where a device fails to meet the required security configuration.

    list_parameters

Try it

Copy these to start.

Use these prompts to begin your security audit.

Starting points

Swap out the specific blueprint names or parameter types to target certain security rules.

Kandji Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Kandji capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "kandji-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp"
    }
  }
}
Copy into chat04
  • Check my Kandji blueprints and tell me if any devices are missing the required security parameters.

  • List all my current blueprints and find any mismatches in the encryption settings.

  • Compare my fleet against the 'Standard Security' blueprint and list the non-compliant devices.

  • Which security parameters are currently failing across my most active device groups?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Kandji once, then ask.

Log in once to link your Kandji account. Your credentials stay encrypted, and you can immediately start auditing your fleet through your AI client.

Connect Kandji to your AI

FAQ

How this task behaves

  • 01

    Can the AI change my security policies?

    No. The AI can only read your blueprints and parameters to find issues. You must manually update policies in Kandji.

  • 02

    Can the AI deploy new software to my devices?

    No. This specific task is limited to checking configurations and parameters via the available tools.

  • 03

    How does the AI know which devices are out of compliance?

    It uses the list_blueprints and list_parameters tools to compare your intended settings against the actual device states.

  • 04

    Does the AI delete any of my Kandji configurations?

    No. The AI has read-only access to your blueprints and parameters.

  • 05

    Can I audit a specific group of devices?

    Yes, if you provide the specific blueprint or parameter name you want to check against.

  • More questions about Kandji? The Connector page answers them. See everything the Kandji Connector can do

Connect Kandji to Claude, Cursor, ChatGPT & more