• TRIAGE
  • USER DATA
  • DETAILS
  • HUMAN

How to audit fleet security compliance with your AI

Connect Kolide to your AI client to turn raw security issues into a clear list of non-compliant users and devices.

Ask AI about this page

Short answer

How can I audit my fleet security with AI?

Your AI pulls active security issues from Kolide and maps them to specific people. You get a prioritized list of compliance gaps and the exact users responsible for them.

Audit outcomes.

Where your audit data lands.

The AI organizes Kolide data into these four areas.

TRIAGE

Prioritized issue lists

The AI pulls all current security issues. You get a clean list of what needs fixing right now.

USER DATA

Identified non-compliant users

The AI connects security failures to specific people. You'll see exactly who is running outdated software or insecure settings.

DETAILS

Deep dive on failures

The AI pulls specific technical details for any issue you flag. This gives you the context needed to fix the problem.

HUMAN

Manual remediation

The AI identifies the gaps, but you decide how to talk to users or change policies. It leaves the actual enforcement to you.

The workflow

What your AI does when the data arrives.

The AI handles the heavy lifting of scanning and mapping data so you don't have to manually click through dashboards.

  1. Scan for issues

    The AI looks through your entire fleet to find every active security issue currently flagged in Kolide.

    list_kolide_issues

  2. Map issues to people

    It identifies which specific users are tied to the security failures found in the previous step.

    list_kolide_people

  3. Extract technical context

    When you find a critical failure, the AI pulls the specific details of that issue to explain why it happened.

    get_issue_details

  4. Profile non-compliant users

    The AI pulls individual user profiles to help you understand the context of a specific person's security posture.

    get_person_details

Try it

Copy these to start.

Use these prompts to begin your audit.

Starting points

These are starting points. Swap out the specific issue names or user roles to match your actual Kolide data.

Kolide Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_IxpJHD6HTbvQIvcvAz5O4PvMjzMVYwv1YW8pZf8H/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Kolide capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "kolide-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_IxpJHD6HTbvQIvcvAz5O4PvMjzMVYwv1YW8pZf8H/mcp"
    }
  }
}
Copy into chat04

  • List all current security issues in Kolide and summarize the most common ones.

  • Find all users in Kolide who have unresolved security issues.

  • Get the details for the issue regarding outdated macOS versions and tell me which users are affected.

  • Show me the profile details for the user associated with the most recent security alert.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Kolide once, then ask.

Just link your Kolide account. Your credentials stay encrypted, and you can immediately start asking questions about your fleet.

Connect Kolide to your AI

FAQ

How this task behaves.

  • 01

    Can the AI fix security issues automatically?

    No. The AI can only read issue data and user details. You must manually perform any remediation or policy changes.

  • 02

    Can the AI delete issues in Kolide?

    No. The tools only allow the AI to list and retrieve information. It cannot modify or delete any records in your Kolide account.

  • 03

    Does the AI see all my device data?

    The AI only sees the specific issue and person data provided by the Kolide tools. It doesn't have unrestricted access to your entire device fleet.

  • 04

    Can I ask about specific users?

    Yes. Once the AI has access, you can ask for details on specific people flagged by security issues.

  • 05

    How does the AI know which user has which issue?

    The AI uses the connection between issues and people provided by the Kolide data to map failures to specific individuals.

  • More questions about Kolide? See everything the Kolide Connector can do

Connect Kolide to Claude, Cursor, ChatGPT & more