Repolode
Submit
prowler-cloud

prowler-cloud/prowler

Open-source cloud security platform and CLI that runs security and compliance checks across AWS, Azure, GCP and other cloud environments.

Open-source alternative to:WizPrisma Cloud

View on GitHubWebsite
Stars
15,087
Forks
2,451
Open issues
494
Last commit
9 hours ago

What is it?

Prowler is an open-source tool for assessing security and compliance across cloud accounts. Its CLI runs a large library of built-in checks against providers such as AWS, Azure, Google Cloud, Kubernetes, GitHub, Microsoft 365, and several others, and maps results to frameworks including CIS, NIST, PCI-DSS, HIPAA, GDPR, and SOC 2.

For teams that prefer a interface, Prowler also offers Prowler Local Server, a self-hosted web app built from a Next.js UI, a Django REST API, and Celery workers, with a local dashboard launched from the CLI. The project additionally includes an AI assistant component (Lighthouse) and an Attack Paths feature that adds a graph of cloud inventory and findings on AWS, stored in Neo4j or Amazon Neptune.

Prowler can be installed from PyPI or run as a container, and an official GitHub Action lets it run scans in CI workflows with SARIF output for code scanning.

Key features

  • 01Runs built-in security checks across AWS, Azure, GCP, Kubernetes, GitHub, and Microsoft 365.
  • 02Maps findings to compliance frameworks such as CIS, NIST, PCI-DSS, HIPAA, and GDPR.
  • 03Provides a CLI command for each provider plus a local dashboard.
  • 04Offers a self-hosted web interface with an API and background workers.
  • 05Includes an official GitHub Action with SARIF output for code scanning.
  • 06Builds an Attack Paths graph on AWS by combining cloud inventory with findings.

Use cases

  • Auditing AWS or Azure accounts against CIS benchmarks before a compliance review.
  • Running cloud security scans in CI pipelines on every pull request.
  • Checking Kubernetes clusters or GitHub organization settings for misconfigurations.
  • Tracking security posture across multiple cloud accounts in one self-hosted dashboard.

Quick start

  1. 1

    Install Docker Compose

  2. 2

    Download docker-compose.yml and .env for the latest release, as shown in the README

  3. 3

    Start Prowler Local Server with Docker Compose, then open http://localhost:3000

    docker compose up -d

Things to know

  • Self-hosting the Local Server requires Docker Compose and several running services, such as the API, worker and databases.
  • Scanning cloud accounts needs credentials for each provider, and some features need extra setup such as mounting AWS config into the container.

Topics

#cloud-security#compliance#aws#azure#gcp#cspm#security-audit#devsecops#cis-benchmark#cloud

FAQ

What is prowler?
Open-source cloud security platform and CLI that runs security and compliance checks across AWS, Azure, GCP and other cloud environments. Prowler is an open-source tool for assessing security and compliance across cloud accounts. Its CLI runs a large library of built-in checks against providers such as AWS, Azure, Google Cloud, Kubernetes, GitHub, Microsoft 365, and several others, and maps results to frameworks including CIS, NIST, PCI-DSS, HIPAA, GDPR, and SOC 2.
Is prowler free to use? What license does it have?
prowler is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is prowler still maintained?
Actively maintained. The last commit to prowler was on Oct 22, 2026.
What can I use prowler for?
Auditing AWS or Azure accounts against CIS benchmarks before a compliance review. Running cloud security scans in CI pipelines on every pull request. Checking Kubernetes clusters or GitHub organization settings for misconfigurations. Tracking security posture across multiple cloud accounts in one self-hosted dashboard.
How do I install prowler?
Install Docker Compose Download docker-compose.yml and .env for the latest release, as shown in the README Start Prowler Local Server with Docker Compose, then open http://localhost:3000: docker compose up -d
Where can I get prowler?
The source code and installation instructions are on GitHub: https://github.com/prowler-cloud/prowler

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects