CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace
from the free-config-audit dept.
CISA's SCuBA project has two free tools that check cloud settings against its secure configuration baselines. ScubaGear (PowerShell, from the PowerShell Gallery) audits a Microsoft 365 tenant: Entra ID, Exchange Online, Teams, SharePoint, Power BI and Power Platform. ScubaGoggles does the same for Google Workspace through the Admin SDK, and CISA labels it alpha. Both write HTML and JSON reports and only point out gaps; they never change settings, so they are safe to run on your own tenant.