ScubaGear
ScubaGear is a PowerShell-based assessment tool that evaluates Microsoft 365 tenant configurations against CISA security baselines using Open Policy Agent and generates compliance reports.
ScubaGear is a PowerShell-based assessment tool that evaluates Microsoft 365 tenant configurations against CISA security baselines using Open Policy Agent and generates compliance reports.
Checked October 2026.
ScubaGear is a configuration assessment tool that evaluates Microsoft 365 tenant environments against CISA Secure Cloud Business Applications (SCuBA) Security Configuration Baseline documents.
The tool operates through a three-step process:
ScubaGear is designed for M365 administrators who need to verify their tenant configurations comply with security baselines. The tool can be installed from PSGallery and requires specific dependencies and permissions to access M365 APIs.
The assessment tool supports evaluation of multiple Microsoft 365 products and services. It can be executed with command-line parameters or through configuration files for customized assessments. ScubaGear includes troubleshooting capabilities for common issues related to multi-tenant environments, Microsoft Defender, Exchange Online, Power Platform, Microsoft Graph connectivity, and proxy configurations.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about ScubaGear: features, pricing and alternatives.
ScubaGear is a product in the SSPM category. It covers Configuration Management, Office 365 and Microsoft.
ScubaGear is free. Download and setup instructions are at https://github.com/cisagov/ScubaGear/.
Alternatives to ScubaGear listed on CybersecTools:
Compare all ScubaGear alternatives at https://cybersectools.com/alternatives/scubagear
ScubaGear is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Continuous SaaS security monitoring with automated threat remediation for IT teams.
MSP-focused SaaS security assessment tool to identify risks in SaaS apps.
Automates Microsoft 365 security policy application across multi-tenant MSP envs.
SSPM solution for Google Workspace managing misconfigurations and app risks
SaaS security platform for managing misconfigurations and risks
SaaS and AI security platform for posture mgmt, ITDR, and NHI governance.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Attack Surface Management Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
