CheckOps home

Tools directory

P

CheckOps

Prowler

Prowler is an Apache-2.0 open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes and more, with a CLI and local server.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

Prowler describes itself as the world’s most widely used open-source cloud security platform, automating security and compliance across cloud environments for humans and AI agents. The repository hosts Prowler OSS (CLI and local server); Prowler also offers a hosted product.

The source code is at prowler-cloud/prowler on GitHub under the Apache-2.0 licence, with about 15,200 stars; the most recent commit was on 10 November 2026.

Features

  1. Multi-cloud checks: AWS, Azure, GCP, Kubernetes and more.
  2. Compliance frameworks: CIS, PCI-DSS, ISO 27001 and others; see docs.
  3. CLI and local server: Command line plus a UI.
  4. Reports: CSV, JSON, HTML and more.
  5. Custom checks: Extend with your own.

Pros

  1. Free to use: Open source under Apache-2.0.
  2. Maintained: Commits as recent as 10 November 2026.
  3. Community: About 15,200 GitHub stars.

Cons

  1. Live account access: Needs read credentials to your cloud.
  2. Large outputs: Expect many findings at first.
pip install prowler
prowler aws

Resources:

Pricing

Prowler OSS is free (Apache-2.0). Prowler’s hosted product is paid; see site.

  1. Cloud security teams auditing accounts.
  2. Compliance teams producing evidence.
  3. Not a fit for scanning IaC before deploy; use Checkov or KICS.

Conclusion

Prowler is a broad, free cloud security and compliance scanner.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with Prowler side by side.