Scout Suite is an open source multi-cloud security-auditing tool, which enables
security posture assessment of cloud environments. Using the APIs exposed by cloud
providers, Scout Suite gathers configuration data for manual inspection and
highlights risk areas. Rather than going through dozens of pages on the web
consoles, Scout Suite presents a clear view of the attack surface automatically.
Scout Suite was designed by security consultants/auditors. It is meant to provide a
point-in-time security-oriented view of the cloud account it was run in. Once the
data has been gathered, all usage may be performed offline.
This package contains an apache-based server to display the results of security
scans.
You will need to set up the various cloud configuration files in the ~scout
users home directory to actually invoke the scan.
The various scout provider services are run as systemd timers.
|