Cloud
ScoutSuite
Multi-cloud audit tool that collects configuration via APIs and highlights risky settings.
What it is
ScoutSuite is a point-in-time config snapshot: IAM, storage, network, logging. It complements Prowler with a browsable HTML report operators can walk in debrief. Collection is API-only — still treat the HTML as sensitive.
Reach for it when
Cloud reviews when you want a second independent config pass or a self-contained HTML artifact for the client.
Watch-outs
The HTML report can contain account ids, bucket names, and policy documents. Do not email it. Run with the agreed role; do not fall back to a user's long-lived keys. Same ePHI listing caution as Prowler.
Typical invocation
scout aws --profile pentest-readonly
Authorized assessments only. Stay inside the rules of engagement.
Pin to a kit
Open an engagement first.
Related
- Prowler
Cloud security configuration scanner for AWS, Azure, and GCP against CIS and similar benchmarks.
- Pacu
AWS exploitation framework for authorized identity and service abuse proofs after config review.
- Trivy
Scanner for container images, filesystems, IaC, and cloud misconfig in authorized build and landing-zone reviews.