Securing Jenkins NOTE • Access control, which ensures users are authenticated when accessing Jenkins and their activities are authorized. • Protecting Jenkins against external threats This is still very much a work in progress In the default configuration of Jenkins 1.x, Jenkins does not perform any security checks. This means the ability of Jenkins to launch processes and access local files are available to anyone who can access Jenkins web UI and some more. Securing Jenkins has two aspects to it. 189