What is Prowler?

Prowler is an open-source and SaaS cloud security platform for assessing, auditing, and hardening cloud environments. It provides unified visibility across AWS, Azure, Google Cloud, Kubernetes, GitHub, Microsoft 365, Infrastructure as Code, Oracle Cloud, Alibaba Cloud, Cloudflare, and OpenStack. Prowler combines agentic AI with hundreds of security controls to prioritize risks and automate compliance with frameworks like CIS, GDPR, NIST, PCI-DSS, ISO27001, HIPAA, SOC2, and more.

How to use Prowler?

Sign up or log in to Prowler Cloud, then connect your cloud accounts via the Configuration > Cloud Providers flow. For AWS Organizations, deploy the provided CloudFormation template in the management or delegated admin account to onboard all accounts at once. Run scans, review prioritized findings, and use the platform to remediate issues and maintain continuous compliance. Developers can also use the open-source Prowler CLI, SDK, or Local Server.

Core features of Prowler

Unified multi-cloud visibility across AWS, Azure, GCP, Kubernetes, GitHub, M365, IaC, and more
Risk prioritization based on severity, context, and impact
Automated compliance monitoring for CIS, GDPR, NIST, PCI-DSS, ISO27001, HIPAA, SOC2, and custom frameworks
Agentic AI collaboration with Claude, Codex, Cursor, and Copilot
Custom checks, alert muting, and granular role-based access control (RBAC)
Cloud Security Posture Management (CSPM) and Kubernetes Security Posture Management
Infrastructure as Code scanning
Open-source CLI, SDK, and Local Server options