{"name":"prowler: Automate Cloud Security and Compliance","description":"Prowler is a Python-based open cloud security platform for automated security and compliance assessments across cloud environments. Use its CLI or self-hosted Local Server to run checks, review findings, and map results to established frameworks.","github":"https://github.com/prowler-cloud/prowler","url":"https://osrepos.com/repo/prowler-cloud-prowler","source":"osrepos.com","sourceDescription":"This repository profile is provided by osrepos.com, an open source repository discovery platform.","repositoryProfile":"https://osrepos.com/repo/prowler-cloud-prowler","generatedFor":"open source discovery and AI-assisted research","markdown":"https://osrepos.com/repo/prowler-cloud-prowler.md","json":"https://osrepos.com/repo/prowler-cloud-prowler.json","topics":["python","security","cli","cloud-security","cloud-compliance","security-audit","cspm"],"keywords":["python","security","cli","cloud-security","cloud-compliance","security-audit","cspm"],"stars":null,"summary":"Prowler is a Python-based open cloud security platform for automated security and compliance assessments across cloud environments. Use its CLI or self-hosted Local Server to run checks, review findings, and map results to established frameworks.","content":"## Overview\n\nProwler is a Python-based open cloud security platform for automating security and compliance assessments across cloud environments. It offers a CLI and a self-hosted Local Server, with the project also describing Prowler Cloud as a hosted option. Its checks and compliance frameworks help security teams find misconfigurations, prioritize risk, and assess cloud environments against standards.\n\nThe CLI supports a broad set of cloud providers and related targets, while Local Server adds a web interface for running scans and viewing findings. The project is aimed at teams that want repeatable assessments and actionable security results rather than a manually assembled audit process.\n\n## Key Features\n\n- Run security checks from the command line with `prowler <provider>`.\n- Assess cloud accounts and related targets, including AWS, Azure, GCP, Kubernetes, GitHub, and others.\n- Map findings to built-in compliance frameworks such as CIS, NIST, PCI-DSS, GDPR, and ISO 27001.\n- Use Prowler Local Server for a web interface to execute scans and visualize results.\n- Run scans in GitHub Actions, with options for SARIF output and sending findings to Prowler Cloud.\n- Extend AWS scan results with Attack Paths graphs using Neo4j by default, or Amazon Neptune.\n- Install the CLI through PyPI or use container images; deploy Local Server with Docker Compose.\n\n## Use Cases\n\n- Cloud security teams can regularly check accounts for misconfigurations and prioritize findings using Prowler ThreatScore.\n- Compliance teams can use framework mappings to assess cloud environments against relevant standards and regulations.\n- Developers can run infrastructure-as-code checks in pull request workflows and publish findings as SARIF.\n- Organizations seeking a shared scan interface can deploy Local Server to review results across provider accounts.\n\n## Our Take\nProwler is a broad, actively maintained cloud security toolkit, suited to teams that can operate its Python CLI or Docker-based server and want checks across multiple cloud environments.\n\n**Good fit if:**\n- You need repeatable cloud security checks and compliance mappings across more than one provider or target type.\n- You want a Python CLI, GitHub Actions integration, or a self-hosted web interface for scan results.\n- You can work with its Apache-2.0 license and, for Local Server, the Docker Compose-based setup.\n\n**Look elsewhere if:**\n- You need only a lightweight single-provider check and do not need Prowler's broader checks or framework coverage.\n- You cannot meet the CLI's Python requirement or operate Docker and Docker Compose for Local Server.\n- Your required cloud provider or workflow is not supported by the available checks and interfaces.\n\n## Project Health\n\n| Signal | Value |\n|---|---|\n| Status | **Active**: regular commits and releases |\n| Last commit | 2026-11-09 (today) |\n| Commits, last 90 days | 100+ |\n| Releases, last 12 months | 66 (latest 5.48.0, 2026-11-06) |\n| Contributors | 100+ (top contributor: 11% of commits) |\n| Issues closed, last 90 days | 1+ |\n| Pull requests merged, last 90 days | 30 (typically merged in 0 days) |\n| Project age | 10 years |\n\nChecked on 2026-11-09 with the GitHub API.\n\n## Project Facts\n\n- Language: Python\n- License: Apache-2.0\n- Stars: 15.2k\n- Forks: 2.5k\n- Topics: aws, azure, cis-benchmark, cloud, cloudsecurity, compliance, cspm, devsecops\n- Website: https://prowler.com\n- Archived: no\n\n## What You Need\n\nDetected in the repository:\n\n- Python >=3.10,<3.14 (from pyproject.toml)\n- A Dockerfile, so it can run in a container; a Compose file sets up the related services\n- A test suite and automated checks on GitHub Actions\n\n## Getting Started\n\nInstall the CLI with Python 3.10 or later, below 3.13, then run a provider scan:\n\n```console\npip install prowler\nprowler aws\n```\n\nSee the [README](https://github.com/prowler-cloud/prowler) and [Prowler documentation](https://docs.prowler.com/) for provider authentication, supported checks, Local Server installation, and other options.\n\n## License in Plain Words\n\n**Apache-2.0** (permissive).\n\n- Commercial use: yes\n- Modify and redistribute: yes\n- You must keep: the license, the NOTICE file and a note of your changes\n- Share your changes: no\n- Includes an explicit patent grant from the contributors\n\nA summary, not legal advice: the LICENSE file is what applies.\n\n## Alternatives\n\n- [ScoutSuite](https://osrepos.com/repo/nccgroup-scoutsuite): ScoutSuite assesses cloud accounts through provider APIs and presents findings in an HTML report, while Prowler also offers a self-hosted server and framework mapping.\n\n| Project | Language | License | Stars | Status |\n|---|---|---|---|---|\n| **prowler** | Python | Apache-2.0 | 15.2k | Active |\n| [ScoutSuite](https://osrepos.com/repo/nccgroup-scoutsuite) | Python | GPL-2.0 | 7.9k | Inactive |\n\n## Considerations\n\n- The CLI README specifies Python >=3.10 and <3.13, while the repository's project metadata lists >=3.10 and <3.14. Check the release and installation instructions for the version you plan to use.\n- Local Server is more involved than the CLI: Docker Compose is required, and the documented stack includes an API, worker, scheduler, database, and other services. Review its configuration and credential handling before deploying it.\n- The published check and framework counts are periodically updated, so confirm current coverage in Prowler Hub before relying on a particular control.\n- The health data indicates active development, frequent releases, and a contributor base that is not concentrated in one person. It also reports limited recent issue closure data, so do not infer responsiveness from commit and release activity alone.","metrics":{"detailViews":4,"githubClicks":1},"dates":{"published":null,"modified":"2026-11-09T19:19:26.000Z"}}