CloudSploit

cloudsploit scan

Scans the cloud account with CloudSploit, evaluating community security controls in a findings report.

Run it when you need an audit with the community engine: CloudSploit (now Aqua) evaluates the account (AWS, Azure, GCP) against its security plugins — buckets, IAM policies, security groups, encryption, logging — and generates the report with findings by severity. It's the open-source audit with a broad plugin catalog: the account's posture in a report. In hardening and periodic review, CloudSploit is one of the options for cloud auditing: findings are reviewed and remediated, and the engine can be extended with custom plugins.

Don't use it as intrusion detection: CloudSploit audits configuration, not behavior. Coverage depends on plugins and credentials: without the proper read policy, services aren't evaluated. And watch out for maintenance: the project was integrated into Aqua (the open-source version is maintained less frequently) — for current AWS auditing, Prowler is the reference; CloudSploit is one option in the toolkit. Findings require triage by severity and remediation is prioritized. For continuous posture, managed layers (Security Hub, Defender, SCC) are the option; CloudSploit is the point-in-time audit.