Cloud Audit
@gebalamariusz
Open-source AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server. 47 checks across 15 AWS services. Every finding includes copy-paste remediation (CLI + Terraform) and a dollar-risk estimate with verified source. First free standalone AWS security MCP s
Overview
What is Cloud Audit?
Cloud Audit is an open-source CLI scanner that correlates AWS security findings into attack chains and provides copy-paste remediation in AWS CLI and Terraform. It is built for security engineers and cloud teams who need actionable, context-rich output rather than a flat list of issues.
How to use Cloud Audit?
Install with pip install cloud-audit and run cloud-audit scan (uses default AWS credentials). For a demo without an account, run cloud-audit demo. The MCP server is started with claude mcp add cloud-audit -- uvx --from cloud-audit cloud-audit-mcp.
Key features of Cloud Audit
- Attack chain detection (20 rules) correlating findings into exploitable paths
- Copy-paste remediation with AWS CLI commands and Terraform HCL
- Scan diff to track drift between scans
- Built-in compliance engines for CIS AWS v3.0 and SOC
