SCUBA now scans Google

SCUBA is not Scuba, one is a pursuit I would like to try one day and the other is something to deetect misconfigurations and some security vulnerabilities in a cloud environment (the one in all CAPS).

CISA SCUBA is maintained and is free, it works for Microsoft 365 environments and now they have updated for Google cloud which is great news.

A tool only provides some coverage as there is much more to a security assessment that just data, but SCUBA is still a great place to start a security posture improvement strategy.

For a Managed Service provider with security expertise already, SCUBA may help your engagements with actionable insights on what controls need review or improvements.

I have covered SCUBA here before for further information.

Below is the link to the updated google capability.

https://www.cisa.gov/news-events/alerts/2023/12/12/cisa-releases-scuba-google-workspace-secure-configuration-baselines-public-comment