CloudFox

What it is

A Go CLI from Bishop Fox that uses read-oriented cloud permissions to inventory services and highlight risky trust relationships. It is built for objective-based cloud penetration tests.

What it helps with

- Mapping principals, roles, and trust relationships in a cloud account
- Finding attack paths during an authorized cloud pentest
- Inventorying services that matter to privilege escalation
- Running the same style of checks across AWS, Azure, and GCP

Who it's for

Cloud pentesters and red teams assessing cloud accounts they are authorized to test.

Worth knowing

It expects limited read-oriented credentials such as SecurityAudit-style access. Use it only inside approved cloud engagements.

Does it change cloud resources?
It is designed around read-oriented awareness checks rather than destructive changes.

How does it compare with Prowler?
In our view Prowler suits broad security posture checks, while CloudFox focuses on attack-path situational awareness for pentests.