Scout Suite is an open source, cross-cloud security auditing tool designed to assess the security posture of cloud environments.
By leveraging APIs provided by cloud vendors, Scout Suite collects and organizes configuration data, making it easier to identify potential threats. Instead of manually searching through multiple pages on cloud web consoles, Scout Suite automatically creates a comprehensive and clear overview of the attack surface, simplifying the security assessment process.
Scout Suite was created by security consultants and auditors to provide a point-in-time, security-focused snapshot of the cloud account it is running on. After the data is collected, all subsequent analysis and use can be done offline.
Currently, the following cloud providers are supported:
Amazon Web Services Microsoft Azure Google Cloud Platform Alibaba Cloud (Beta) Oracle Cloud Infrastructure (Beta) Kubernetes Clusters on a Cloud Provider (Beta) DigitalOcean Cloud (Beta)
Scout Suite is available for free on GitHub.
Must Read: