By Guru Baran
Publication Date: 2026-10-27 15:31:00
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) offers two free tools to help organizations find security misconfigurations in Microsoft 365 and Google Workspace. ScubaGear and ScubaGoggles compare cloud settings against recommended security baselines, giving administrators a clearer view of weaknesses that need attention. Both are available to government agencies and private businesses.
The tools belong to CISA’s Secure Cloud Business Applications project, known as SCuBA. Established in 2022, the project addresses security and visibility gaps exposed by attacks against cloud services. CISA introduced the assessment tools in 2023, making them existing resources rather than newly launched products.
Although SCuBA primarily supports Federal Civilian Executive Branch agencies, its guidance is available to any organization. The baselines aim to protect information created, accessed, shared, or stored in cloud applications while allowing organizations to…
