nccgroup/ScoutSuite

Features

• Cloud Auditing Tools - Provides a multi-cloud auditing tool to assess infrastructure configurations against security best practices.
• Cloud Compliance Auditors - Automates the evaluation of cloud infrastructure against industry-standard regulatory frameworks and security benchmarks.
• Configuration Logic Evaluators - Evaluates resource configurations using nested logical operators and dynamic macros to detect security risks.
• Offline Configuration Analysis - Evaluates cloud resource settings offline using cached data to test security rules without repeated API calls.
• Control Plane Auditing - Scans Kubernetes control planes and master nodes across cloud providers to identify posture risks.
• GCP Configuration Audits - Analyzes Google Cloud configurations across organizations and projects to identify security risks.
• Cloud Provider Abstraction Layers - Employs unified interfaces to standardize the fetching of configuration data across multiple cloud service providers.
• Cloud Security Posture Management - Gathers cloud configuration data to track and visualize the security posture of cloud accounts.
• JSON-Based Rule Engines - Uses a JSON-based rule engine to evaluate cloud resource configurations against security benchmarks.
• DigitalOcean Configuration Audits - Gathers configuration data from DigitalOcean APIs to perform security posture assessments.
• AWS - Gathers security posture data from AWS APIs to identify risk areas.
• Kubernetes Posture Scanning - Scans Kubernetes clusters and control planes across multiple cloud providers to identify security risks.
• Security Rule Development - Allows the creation of tailored security checks to identify environment-specific risks.
• HTML Analysis Reports - Generates structured HTML reports for visual inspection of cloud security posture and analysis results.
• Local State Caches - Persists downloaded cloud configurations locally to allow iterative rule testing without repeating API calls.
• Rule Parameterization - Supports using arguments within rule definitions to reuse a single security check across different values.
• Cloud Provider Integrations - Enables the implementation of custom authentication strategies and data facades to integrate additional cloud platforms.
• Multi-Account Scanning - Allows scanning a specific list of cloud subscriptions or all accessible accounts in one run.
• Cloud Credential Management - Supports authenticating to cloud APIs using environment variables or credential files.
• Custom Compliance Rulesets - Executes specific security findings based on industry-standard benchmarks using custom rulesets.
• Temporary Security Tokens - Manages temporary security token exchanges and role assumptions to access multiple cloud accounts.
• Identity Authentication - Provides support for connecting to cloud environments via CLI sessions, managed identities, and browser-based MFA.
• AWS Role Assumption - Allows requesting temporary security credentials using role identifiers to perform audits in specific security contexts.
• Security Finding Management - Allows marking specific resources as exceptions to security rules to suppress them from reports.
• Security Report Generation - Generates security scan findings as structured HTML reports and JSON exports for stakeholders.
• Offline Configuration Analysis - Performs security audits against downloaded configuration data to test rule changes without live API calls.
• Collection and Analysis Decoupling - Implements a decoupled architecture that separates cloud data collection from security analysis to enable offline auditing.
• Rule Evaluators - Allows passing external arguments and resolving resource IDs at runtime for flexible rule evaluation across environments.
• Cloud Platform Security - Multi-cloud security auditing for posture assessment.
• Cloud Security - Multi-cloud security scanning tool.
• Cloud Infrastructure Security - Multi-cloud security auditing tool for infrastructure assessment.
• Security Assessment Tools - Multi-cloud security auditing tool for infrastructure assessment.

Star history