ScoutSuite (T) alternatives
6 tools in the catalogue cover the same ground as ScoutSuite (T) and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Checkov (T)freeInfrastructure-as-code security scanner that checks Terraform, CloudFormation, Kubernetes, and other cloud configs against policy rules.
- Cloud Custodian (T)freePolicy-as-code engine for cloud governance and security that can detect and remediate risky cloud configurations.
- Prowler (T)freemiumCloud security posture and compliance assessment framework covering AWS, Azure, GCP, Kubernetes, and SaaS surfaces.
- Steampipe (T)freemiumSQL interface over cloud APIs and services, enabling ad hoc querying of AWS, Azure, GCP, and many other data sources.
- AADInternals (T)freePowerShell toolkit for Azure AD and Entra ID assessment, including tenant reconnaissance and hybrid identity attack-path analysis.
- Amass (T)freeAdvanced attack surface mapping framework for DNS and subdomain enumeration with graph correlation and extensive data-source support.
ScoutSuite (T)
Cloud Infrastructure
Also written ScoutSuite, Scout Suite
Multi-cloud auditing tool that inventories cloud resources and highlights security risks in an interactive HTML report.
RECOMMENDED USE
Snapshot-style multi-cloud security posture reviews
Information
Video tutorials
Learn to use ScoutSuite (T)
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
Prowler (T)
Cloud InfrastructureCloud security posture and compliance assessment framework covering AWS, Azure, GCP, Kubernetes, and SaaS surfaces.
Checkov (T)
Cloud InfrastructureInfrastructure-as-code security scanner that checks Terraform, CloudFormation, Kubernetes, and other cloud configs against policy rules.
Cloud Custodian (T)
Cloud InfrastructurePolicy-as-code engine for cloud governance and security that can detect and remediate risky cloud configurations.
cloud_enum (T)
Cloud InfrastructureMulti-cloud enumeration tool that looks for exposed AWS, Azure, and GCP storage assets from target naming patterns.
User reviews
Be the first to leave a review