Skyhawk Security BAS vs Stratus Red Team

Skyhawk Security BAS is a cloud SaaS Breach and Attack Simulation platform for cloud security teams and MSSPs. It runs custom, agentless attack simulations against a digital twin of cloud architecture and security controls, which Skyhawk says avoids affecting production systems or people. Continuous rehearsals validate controls, improve detection accuracy, and help shape response playbooks; teams can also check automated responses before production deployment. Validated exposures are prioritized by the business value of the affected asset. Listed attack surfaces include identities and permissions, vulnerabilities, attack paths, and high-value cloud assets, with MITRE ATT&CK mapping, custom scenarios, and continuous scheduling. The platform supports AWS, Azure, and GCP through API-based integration. Findings can come from Wiz, AWS Inspector, GuardDuty, Macie, and Tenable. Jira and ServiceNow integrations support remediation tracking. Pricing is on request, with a free 30-day trial.

Stratus Red Team is a free, open-source Go binary for running specific offensive attack techniques against a live cloud environment and checking detections. Its techniques map to MITRE ATT&CK, with coverage for AWS, Azure, GCP, Kubernetes, Amazon EKS, and Entra ID. For each technique, it can prepare prerequisites, detonate the activity, reverse side effects, and remove prerequisites. Terraform creates and removes required infrastructure, and Stratus downloads its own Terraform binary. Installation options include Go, Homebrew, pre-built Linux, Windows, and macOS binaries, and Docker. The tool can also operate as a Go library for automation and custom techniques. It supports Linux, macOS, Windows, API use, and self-hosting. Documentation recommends an administrator role in a sandbox account or test cluster, not production infrastructure. Kubernetes clusters must already exist, AWS customer-provided detonation infrastructure is unsupported, and Azure resources are fixed to West US.