Alternatives to ScubaGear
A CISA PowerShell tool that assesses a Microsoft 365 tenant's configuration against the SCuBA security baselines. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
ScubaGear
A CISA PowerShell tool that assesses a Microsoft 365 tenant's configuration against the SCuBA security baselines.
Replacements
Listings that take over the same core job as ScubaGear.
Maester
An open-source PowerShell test framework that checks a Microsoft 365 tenant's security configuration.
Maester is an open source PowerShell framework with over 360 Microsoft 365 security tests, five compliance baselines and custom Pester tests that can run in CI pipelines.
Also worth comparing
These listings name ScubaGear as their own alternative, so the relationship runs both ways.
Prowler
Check cloud environments for security configuration issues.
ScubaGear checks Microsoft 365 tenant settings against CISA SCuBA baselines, so it narrows coverage from cloud platforms to Microsoft 365 only.
Similar software
Related functionality, not a direct replacement.
ScubaGoggles
A CISA command-line tool that checks a Google Workspace organization's settings against the SCuBA secure configuration baselines.
Microsoft Graph PowerShell
Microsoft's PowerShell module for managing Microsoft 365 and Entra identities and automating admin tasks through Microsoft Graph.
AdminDroid Free
Free edition of AdminDroid's Microsoft 365 reporting, auditing and Entra ID management tool.
Purple Knight
A free Windows tool that assesses Active Directory, Entra ID and Okta for security weaknesses.
Microsoft Security Compliance Toolkit
Microsoft tools and security baselines for analyzing, testing and comparing Windows security configurations.
