Multi-cloud security auditing tool
NCC Group's multi-cloud auditing tool that collects configuration data through cloud APIs and highlights risk areas in an offline HTML report.
ScoutSuite queries the APIs of AWS, Azure, Google Cloud, Alibaba Cloud and Oracle Cloud with read-only credentials, gathers configuration data and runs rules over it. The result is a self-contained HTML report that lets an auditor browse resources and flagged findings without further API calls.
It was created by NCC Group for point-in-time cloud security reviews. Check the repository activity before relying on it for newer cloud services.
GPL-2.0-only · GNU GPL v2 · Open source
Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: GPL-2.0.
No published advisory found for ScoutSuite in GitHub repository advisories. That does not mean the tool has no vulnerabilities.
Sources: GitHub repository advisories · checked 2026-10-20.
Cloud security posture and compliance checks
Open-source cloud security platform that runs hundreds of checks against AWS, Azure, Google Cloud, Kubernetes and Microsoft 365, mapped to compliance frameworks.
Static analysis for infrastructure as code
Policy-as-code scanner for Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and more, with graph-based checks across resources.
Infrastructure-as-code scanner with Rego queries
Checkmarx's open-source scanner for security issues and misconfigurations in IaC, with queries written in Rego across many platforms.
All-in-one scanner for images, code, IaC and clusters
Scanner from Aqua Security that finds vulnerabilities, misconfigurations, secrets and licences in container images, file systems, repositories and Kubernetes.
Kubernetes security posture and compliance scanner
CNCF project that scans clusters, manifests and Helm charts against frameworks such as the NSA-CISA guidance and CIS Benchmarks, and scans images.
Template-based vulnerability scanner
Fast vulnerability scanner driven by YAML templates, with thousands of community templates for CVEs, misconfigurations and exposures across many protocols.
