These utilities are designed to validate Microsoft 365 and Google Workspace configurations against established security baselines.
The agency released ScubaGear version 2.0 and ScubaGoggles version 1.1.0. ScubaGear v2.0 represents the most extensive update for that specific tool since its introduction in 2022.
Furthermore, ScubaGoggles, which was initially released in 2023, now incorporates a new baseline and features improved Gemini controls.
Both of these instruments are components of CISA’s Secure Cloud Business Applications project, designated as SCuBA. This project is responsible for generating configuration guidance.
The enhancements to these tools indicate a continued focus by the agency on operational security within major cloud platforms. This aligns with the broader trend of infrastructure providers needing verifiable methods to maintain compliance against evolving threat landscapes.
