Prowler is an Open Source security tool to perform AWS, GCP and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technical Review (FTR), ENS (Spanish National Security Scheme) and your custom security frameworks.
Prowler SaaS and Prowler Open Source are as dynamic and adaptable as the environment they’re meant to protect. Trusted by the leaders in security.
Learn more at prowler.com
Prowler is an Open Source security tool to perform AWS, Azure, Google Cloud and Kubernetes security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness, and also remediations! We have Prowler CLI (Command Line Interface) that we call Prowler Open Source and a service on top of it that we call Prowler SaaS.
Prowler App is a web application that allows you to run Prowler in your cloud provider accounts and visualize the results in a user-friendly interface.
More details at Prowler App Documentation
prowler <provider>
prowler dashboard
It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technical Review (FTR), ENS (Spanish National Security Scheme) and your custom security frameworks.
| Provider | Checks | Services | Compliance Frameworks | Categories |
|---|---|---|---|---|
| AWS | 561 | 81 -> prowler aws --list-services | 30 -> prowler aws --list-compliance | 9 -> prowler aws --list-categories |
| GCP | 77 | 13 -> prowler gcp --list-services | 3 -> prowler gcp --list-compliance | 2 -> prowler gcp --list-categories |
| Azure | 139 | 18 -> prowler azure --list-services | 4 -> prowler azure --list-compliance | 2 -> prowler azure --list-categories |
| Kubernetes | 83 | 7 -> prowler kubernetes --list-services | 1 -> prowler kubernetes --list-compliance | 7 -> prowler kubernetes --list-categories |
Prowler App can be installed in different ways, depending on your environment:
See how to use Prowler App in the Prowler App Usage Guide.
Requirements
Docker Compose installed: https://docs.docker.com/compose/install/.Commands
curl -LO https://raw.githubusercontent.com/prowler-cloud/prowler/refs/heads/master/docker-compose.yml
curl -LO https://raw.githubusercontent.com/prowler-cloud/prowler/refs/heads/master/.env
docker compose up -d
Enjoy Prowler App at http://localhost:3000 by signing up with your email and password.
Requirements
git installed.poetry installed: poetry installation.npm installed: npm installation.Docker Compose installed: https://docs.docker.com/compose/install/.Commands to run the API
git clone https://github.com/prowler-cloud/prowler
cd prowler/api
poetry install
poetry shell
set -a
source .env
docker compose up postgres valkey -d
cd src/backend
python manage.py migrate --database admin
gunicorn -c config/guniconf.py config.wsgi:application
Now, you can access the API documentation at http://localhost:8080/api/v1/docs.
Commands to run the API Worker
git clone https://github.com/prowler-cloud/prowler
cd prowler/api
poetry install
poetry shell
set -a
source .env
cd src/backend
python -m celery -A config.celery worker -l info -E
Commands to run the UI
git clone https://github.com/prowler-cloud/prowler
cd prowler/ui
npm install
npm run build
npm start
Enjoy Prowler App at http://localhost:3000 by signing up with your email and password.
Prowler CLI is available as a project in PyPI, thus can be installed using pip with Python >= 3.9, < 3.13:
pip install prowler
prowler -v
More details at https://docs.prowler.com
The available versions of Prowler CLI are the following:
latest: in sync with master branch (bear in mind that it is not a stable version)v4-latest: in sync with v4 branch (bear in mind that it is not a stable version)v3-latest: in sync with v3 branch (bear in mind that it is not a stable version)<x.y.z> (release): you can find the releases here, those are stable releases.stable: this tag always point to the latest release.v4-stable: this tag always point to the latest release for v4.v3-stable: this tag always point to the latest release for v3.The container images are available here:
Python >= 3.9, < 3.13 is required with pip and poetry:
git clone https://github.com/prowler-cloud/prowler
cd prowler
poetry shell
poetry install
python prowler.py -v
If you want to clone Prowler from Windows, use
git config core.longpaths trueto allow long file paths.
The Prowler App consists of three main components:
You can run Prowler from your workstation, a Kubernetes Job, a Google Compute Engine, an Azure VM, an EC2 instance, Fargate or any other container, CloudShell and many more.
Allowlist now is called Mutelist.--quiet option has been deprecated, now use the --status flag to select the finding's status you want to get from PASS, FAIL or MANUAL.INFO finding's status has changed to MANUAL.We have deprecated some of our outputs formats:
--send-sh-only-fails or --security-hub --status FAIL.Install, Usage, Tutorials and Developer Guide is at https://docs.prowler.com/
Prowler is licensed as Apache License 2.0 as specified in each file. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
FAQs
Prowler is an Open Source security tool to perform AWS, GCP and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technical Review (FTR), ENS (Spanish National Security Scheme) and your custom security frameworks.
We found that prowler demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.