tarekcheikh/s3-security-scanner repository overview

# Pull the image
docker pull tarekcheikh/s3-security-scanner:latest

# Scan your S3 buckets
docker run --rm \
  -v ~/.aws:/root/.aws:ro \
  -v $(pwd)/output:/app/output \
  tarekcheikh/s3-security-scanner security

# Discover buckets (no AWS credentials needed)
docker run --rm \
  -v $(pwd)/output:/app/output \
  tarekcheikh/s3-security-scanner discover --target "company-name" --only

# DNS takeover scanning
docker run --rm \
  -v $(pwd)/output:/app/output \
  tarekcheikh/s3-security-scanner dns --domain example.com

Features

- 40+ security checks
- Compliance frameworks: CIS, PCI-DSS, HIPAA, SOC 2, ISO 27001/27017/27018, GDPR
- Bucket discovery without AWS credentials
- DNS subdomain takeover detection
- Multi-format reports (JSON, CSV, HTML)

Documentation

Full documentation: https://github.com/TocConsulting/s3-security-scanner