Recently implemented Security Monkey on an assignment; and now have a new challenge with Azure.

Does anyone know of any similar (must be open source) tools; that can be used for policy validations; checking inbound security groups, users not using MFA etc.?

Looked around but haven't been able to find anything.

  • Try OpenSCAP open-scap.org your question is rather broad. E.g.: "Anyone not using MFA..." for me means those users will never gain access by secure design. Seems like you're trying to solve a design problem with a tool. In any event try OpenSCAP – munkeyoto Apr 19 '16 at 12:37
  • Thanks. This is the tool we went with in the end. – Pacey87 Jul 25 '16 at 16:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.