Alternatives to Maester
An open-source PowerShell test framework that checks a Microsoft 365 tenant's security configuration. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Maester
An open-source PowerShell test framework that checks a Microsoft 365 tenant's security configuration.
Replacements
Listings that take over the same core job as Maester.
ScubaGear
A CISA PowerShell tool that assesses a Microsoft 365 tenant's configuration against the SCuBA security baselines.
ScubaGear is a CISA PowerShell tool that checks Microsoft 365 against the SCuBA baselines, but it is not open source and lacks custom Pester tests.
Also worth comparing
These listings name Maester as their own alternative, so the relationship runs both ways.
Prowler
Check cloud environments for security configuration issues.
Maester runs over 360 PowerShell tests against a Microsoft 365 and Entra tenant, limited to Microsoft rather than multiple cloud platforms.
Similar software
Related functionality, not a direct replacement.
Microsoft Graph PowerShell
Microsoft's PowerShell module for managing Microsoft 365 and Entra identities and automating admin tasks through Microsoft Graph.
AdminDroid Free
Free edition of AdminDroid's Microsoft 365 reporting, auditing and Entra ID management tool.
Purple Knight
A free Windows tool that assesses Active Directory, Entra ID and Okta for security weaknesses.
ScubaGoggles
A CISA command-line tool that checks a Google Workspace organization's settings against the SCuBA secure configuration baselines.
Microsoft Security Compliance Toolkit
Microsoft tools and security baselines for analyzing, testing and comparing Windows security configurations.
AzureHound
A command-line collector that exports Microsoft Azure and Entra ID data for analysis in BloodHound.
