An open-source cloud security platform that automates security and compliance assessments across AWS, Azure, GCP, and other cloud providers.
Prowler is an open-source cloud security platform that automates security and compliance assessments across multiple cloud providers like AWS, Azure, and GCP. It solves the problem of manual, time-consuming security audits by providing hundreds of pre-built checks and compliance frameworks to continuously monitor cloud infrastructure for vulnerabilities and regulatory violations.
Cloud security engineers, DevOps teams, compliance officers, and organizations managing multi-cloud environments who need automated security monitoring and compliance reporting.
Developers choose Prowler because it's the most widely used open-source cloud security platform with extensive multi-cloud coverage, AI-driven threat prioritization, and support for dozens of compliance frameworks—all available through flexible interfaces including CLI, API, and web UI.
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Covers AWS, Azure, GCP, Kubernetes, and over 10 other providers with hundreds of checks each, making it a one-stop solution for heterogeneous environments.
Includes built-in controls for 40+ frameworks like CIS, PCI-DSS, and GDPR, enabling automated regulatory reporting across industries.
Prowler ThreatScore weights findings by risk, helping teams focus on critical vulnerabilities first, as emphasized in the README.
Offers CLI for automation, a web UI for visualization, and REST API for custom integrations, catering to diverse workflows.
Full Prowler App installation requires Docker Compose, poetry, and pnpm, with the README warning against using default environment variables in production.
Attack Path Analysis mandates a Neo4j database instance, adding operational complexity beyond core security scanning.
While AWS has 572 checks, others like Cloudflare lack compliance framework support, and NHN is unofficially maintained, limiting utility for some clouds.
The README highlights multiple branches (e.g., v4-latest) labeled as 'not stable,' which could lead to breaking changes in non-release versions.