AWS S3 security scanner: detect public access, weak bucket policies, missing encryption and compliance gaps across your buckets. Python CLI with multi-format reports.
-
Updated
May 30, 2026 - Python
AWS S3 security scanner: detect public access, weak bucket policies, missing encryption and compliance gaps across your buckets. Python CLI with multi-format reports.
S3Scope is a passive AWS S3 bucket discovery and visibility tool. It helps researchers and pentesters identify S3 bucket endpoints, perform logical hostname-based guessing, and optionally check bucket accessibility. This tool is designed for reconnaissance without writing to S3 buckets and emphasizes clear output and enhanced visibility.
Add a description, image, and links to the bucket-security topic page so that developers can more easily learn about it.
To associate your repository with the bucket-security topic, visit your repo's landing page and select "manage topics."