nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML reports highlighting risk areas and attack surface.
Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud providers, Scout Suite gathers configuration data for manual inspection and highlights risk areas. Rather than going through dozens of pages on the web consoles, Scout Suite presents a clear view of the attack surface automatically.
Scout Suite was designed by security consultants/auditors. It is meant to provide a point-in-time security-oriented view of the cloud account it was run in. Once the data has been gathered, all usage may be performed offline.
The project team can be contacted at [email protected].
The following cloud providers are currently supported:
Refer to the wiki.
Scout Suite is run through the CLI:
Once this has completed, it will generate an HTML report including findings and Cloud account configuration:
The above report was generated by running Scout Suite against https://github.com/nccgroup/sadcloud.
