Scout Suite is an open source multi-cloud security auditing tool that automates cloud environment configuration assessment and risk identification.
Multi-Cloud Security Auditing Tool
Security consultants, auditors, and cloud administrators use Scout Suite to assess the security posture of cloud accounts by gathering configuration data via cloud provider APIs and generating comprehensive offline reports. It simplifies identifying misconfigurations and potential risks across multiple cloud platforms without manual console inspection.
Scout Suite requires appropriate API credentials and permissions for each cloud provider to gather configuration data. It is designed for point-in-time assessments and should be run with security best practices in mind to protect sensitive cloud account information. Offline report generation allows secure review without continuous cloud access.
Refer to the official wiki at https://github.com/nccgroup/ScoutSuite/wiki/Setup for detailed setup instructions
Install via PyPI using pip (implied by PyPI badges)
Optionally use the Docker image from rossja/ncc-scoutsuite on Docker Hubscout --help
Displays help and usage information for Scout Suite CLI
scout aws
Runs a security assessment on an AWS cloud environment
scout azure
Runs a security assessment on a Microsoft Azure cloud environment
scout gcp
Runs a security assessment on a Google Cloud Platform environment
scout --report
Generates an HTML report including findings and cloud account configuration after assessment