News for hackers. Stuff that matters.
Re:ScoutSuite: Multi-cloud security auditing tool by ruffrey on Thursday May 21, 2020 @04:57PM (#23265200)
What are the benefits of using this over Amazon Inspector?
Re:ScoutSuite: Multi-cloud security auditing tool by cj on Thursday May 21, 2020 @05:02PM (#23265286)
Perhaps beneficial to companies utilizing multiple clouds wanting 1 tool and 1 process for auditing across clouds
Re:ScoutSuite: Multi-cloud security auditing tool by xga2 on Friday May 22, 2020 @10:14AM (#23272267)
note - I'm the project's maintainer

Correct, Scout Suite is inherently multi-cloud and has mature support for AWS/Azure/GCP. This is very useful for organizations that want to leverage a single tool to assess the posture of all their environments.

Re:ScoutSuite: Multi-cloud security auditing tool by xga2 on Friday May 22, 2020 @07:33AM (#23270972)
note - I'm the project's maintainer

AWS Inspector allows assessing the baseline security of EC2 instances / hosts, i.e. against CIS benchmarks (https://docs.aws.amazon.com/inspector/latest/userguide/inspe...). Scout Suite assesses the security posture of the cloud environment as a whole, across all [supported] services. It looks at things such as encryption, configuration of Identity and Access Management, resilience, backup configuration, privilege escalation vectors, etc.

Re:ScoutSuite: Multi-cloud security auditing tool by _pdp_ on Thursday May 21, 2020 @05:14PM (#23265443)
This is equivalant of the AWS CIS Benchmark if you use Security Hub. It is also way cheaper.
Re:ScoutSuite: Multi-cloud security auditing tool by xga2 on Friday May 22, 2020 @07:41AM (#23271025)
note - I'm the project's maintainer

And also implements a bunch more rules ;-).