We are excited to announce the release of a new version of our open-source, multi-cloud auditing tool ScoutSuite (on GitHub)!
This version includes multiple new rules and findings for Azure, which align with some of the latest CIS Benchmark checks, multiple bug fixes and feature enhancements, and minor finding template corrections. Supported Python versions have also been updated to cover versions 3.9 and newer.
The most significant changes are:
Core
- Added support for Python versions >= 3.9; versions 3.8 and older are no longer recommended and support will not be provided for issues with these versions
- Secret redaction logic improvements
- Multiple error handling improvements
AWS
- Multiple bugfixes for checks
- Multiple minor corrections for finding templates
Azure
- Multiple bugfixes for checks
- Multiple minor corrections for finding templates
- Updated azure-mgmt-authorization module to v3.0.0
- Added new rules for several Azure CIS Benchmark checks
GCP
- Multiple bugfixes for checks
- Multiple minor corrections for finding templates
Check out the Github page and the Wiki documentation for more information about ScoutSuite.
For those wanting a Software-as-a-Service version, we also offer NCC Scout. This service includes persistent monitoring, as well as coverage of additional services across the three major public cloud platforms. If you would like to hear more, reach out to scout@nccgroup.com or visit our cyberstore!
We would like to express our gratitude to all our contributors:
@FlorinAsavoaie
@yaleman
@tkmru
@elimisteve
@rbailey-godaddy
@rscottbailey
@x4v13r64
@twilson-bf
@x64-latacora
@zachfey
@wrightmalone
@fl0mb
@ncc-akis
@saez0pub
@HIKster
@cckev
