Skill UI

Perform comprehensive security audits across AWS, Azure, and GCP by assessing infrastructure configurations against established CIS Foundations Benchmarks. This skill guides users through running automated scans using industry tools like Prowler and ScoutSuite, interpreting failed controls, identifying security gaps, and implementing systematic remediation to ensure continuous compliance and maintain a robust security posture.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

A comprehensive guide to continuously monitoring multi-cloud environments (AWS, Azure, GCP) for security misconfigurations, compliance violations, and risk drift. This solution leverages industry tools like Prowler and ScoutSuite to enforce compliance standards (CIS, SOC 2, PCI DSS) across heterogeneous cloud infrastructures, providing deep visibility into security gaps and automating remediation workflows.

This skill implements Cloud Security Posture Management (CSPM) across multi-cloud environments. It detects critical cloud-native misconfigurations, such as over-permissive IAM roles, exposed storage buckets, and unencrypted data, using industry-leading tools like AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite. Use this when conducting comprehensive audits of complex, multi-cloud infrastructures for compliance or building consolidated security posture reports.

ScoutSuite is an open-source, agentless tool designed for comprehensive AWS security posture assessment. It queries AWS APIs to automatically enumerate resources across various services, identify critical misconfigurations (like public S3 buckets or overly permissive IAM roles), and generate an interactive HTML report. It is ideal for conducting cloud security audits, compliance checks, or incident response procedures using read-only credentials.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.