Cloud Audit

Open-source AWS security scanner with attack chain detection, breach cost estimation, and copy-paste remediation across 47 checks

gebalamariusz 66 ↓ 4k
Claude CodeClaude DesktopGeneric
View source ↗

Scans AWS accounts for security misconfigurations across IAM, S3, EC2, VPC, RDS, Lambda, ECS, CloudTrail, GuardDuty, KMS, and more. Correlates individual findings into exploitable attack paths using 16 MITRE ATT&CK-based rules, estimates breach costs in dollar amounts per finding, and provides copy-paste CLI commands and Terraform HCL for every remediation. Includes built-in scan diff to track security drift between runs, supports multiple output formats (HTML, JSON, SARIF, Markdown), and exposes six MCP tools for AI-assisted scanning: scan_aws, get_findings, get_attack_chains, get_remediation, get_health_score, and list_checks.

Source

Repository: https://github.com/gebalamariusz/cloud-audit

Maintain Cloud Audit?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[Cloud Audit on getagentictools](https://getagentictools.com/mcp/gebalamariusz-cloud-audit?ref=badge)