Prowler helps security and cloud teams find, prioritise and fix security risks across their cloud accounts, SaaS tenants and Kubernetes clusters. It is built on an open-source engine, so teams can start with a free command-line tool and move to a managed or private platform as their needs grow.
It is aimed at teams that have to keep many environments correctly configured and show auditors the evidence.
At A Glance
| Vendor | Prowler |
|---|---|
| Category | Cloud security, open-source cloud security platform |
| Identities covered | Cloud IAM and identity provider configuration |
| Deployment | Prowler Cloud (SaaS), Prowler Private Cloud, self-hosted Prowler Local Server, Prowler CLI |
| Agentic AI | Prowler Lighthouse AI and Prowler MCP Server |
| Founded | 2023 as a company; open-source project since 2016 |
| Market classification | Cloud Security |
What Prowler Does
Misconfigured cloud accounts and identity settings remain a common route into an organisation, and auditors increasingly ask teams to prove their configuration meets a framework. Prowler checks the configuration of each environment with more than 2,500 checks and maps every finding to over 70 compliance frameworks, so the same scan serves security and audit. Every edition runs the same open-source engine: teams can run it as the Prowler CLI in a terminal or pipeline, host the web app and API themselves, deploy Prowler Private Cloud in their own environment, or use the managed Prowler Cloud service.
Products
Prowler Cloud
Prowler Cloud is the managed SaaS edition, hosted and maintained by Prowler, for teams that want results without running infrastructure. It adds Slack and Jira workflows for remediation and access to the Prowler Cloud MCP Server.
Prowler Private Cloud
Organisations that cannot send configuration data to a SaaS service can run the platform in their own environment, including air-gapped setups. It installs into the customer’s own AWS account from AWS Marketplace.
Prowler CLI And SDK
The open-source command-line tool, licensed under Apache-2.0 and published on GitHub, suits engineers who want to scan from a terminal or build checks into CI/CD. A GitHub Action and cookbooks for CI/CD and in-cluster Kubernetes scanning help with automation, and the Prowler SDK sits alongside the CLI. Prowler Local Server adds a self-hosted web app, API and dashboard that need no SaaS account.
How It Works
| Component | What it does |
|---|---|
| Scanning engine | One open-source engine runs the checks in every edition, from the CLI to Prowler Cloud. |
| Providers | Each provider connects with its own authentication method, documented with a getting started guide. |
| Compliance mapping | Findings are tagged with the compliance frameworks they relate to, so reports can be produced per framework. |
| Deployment options | Prowler Cloud runs as SaaS, Private Cloud runs in the customer’s environment, and the CLI and Local Server are self-hosted. |
| Outputs | Findings can be sent on to Amazon S3 and AWS Security Hub alongside the platform’s own dashboards. |
Identities And Systems Covered
| Cloud providers | AWS, Azure, Google Cloud, Alibaba Cloud, Cloudflare, Huawei Cloud, Oracle Cloud, Linode, OpenStack, Scaleway, StackIT, NHN, E2E Networks and VMware VCF. |
|---|---|
| SaaS and identity platforms | GitHub, Google Workspace, Microsoft 365, MongoDB Atlas, Okta, Vercel and LLM providers. |
| Okta | 29 checks across the DISA Okta IDaaS STIG, covering session policy, application access, authenticators and password policy, API tokens, network zones, and logging and lifecycle, including deactivation of dormant accounts. |
| Other targets | Kubernetes, container images and Infrastructure as Code. |
Agentic AI Capabilities
Prowler Lighthouse AI
Lighthouse AI is “a Cloud Security Analyst chatbot” that works as a round-the-clock virtual analyst and explains how to remediate findings. It retrieves data through Prowler MCP and works with OpenAI, Amazon Bedrock or OpenAI-compatible endpoints such as OpenRouter or Ollama, using models that support tool calling. It can only see data the logged-in user can view, provider credentials stay on the Next.js server, and it has no tools that change the environment.
Prowler MCP Server
The MCP Server lets AI agents such as Claude, Codex, Cursor and Copilot query Prowler data, with installation, configuration and tools reference guides for each agent. A Prowler plugin for Claude Code automates security workflows inside the coding assistant, and agents can query CIS compliance results from a Prowler Cloud account.
Integrations
| Area | Integrations |
|---|---|
| Collaboration and ticketing | Slack, Jira |
| AWS services | Amazon S3, AWS Security Hub |
Company Background
| Founded | The open-source project began in 2016, and its adoption led to the company being formed in 2023. |
|---|---|
| Leadership | Toni de la Fuente (Founder and CEO). |
| Funding | A reported 12.5 million dollar seed round in April 2025, led by Decibel VC with SNR Ventures and individual investors. |
Note: This overview is compiled from Prowler’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.