What ScoutSuite is
ScoutSuite is another useful tool to run a quick scan of your cloud environment to check for any issues. The vendor site is github.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What ScoutSuite covers
ScoutSuite is in the catalog for these capabilities. Categories: Identity and CSPM. Catalog tags: Hands-on, Nerdy, and Open Source.
How to evaluate ScoutSuite in a security program
Use ScoutSuite as a stack candidate, not as diligence evidence. The oneNorma score for ScoutSuite is 4.3/10 (percentile 21). If the real gap is in Identity and CSPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what github.com publishes. Contrast it with pentesting and Security Cloud & Compliance.