prowler mit Homebrew, Nix installieren

Projektlinks

• Homepage
• Repository
• Paketmanager-Seite

Befehle und Aliase

• prowler

Projektgeschichte

Toni de la Fuente started Prowler in 2016 to make cloud security assessment open and accessible. It began in the AWS security-auditing niche and developed into an Apache-licensed cloud security platform with checks and compliance frameworks across numerous providers.

The modern repository hosts both Prowler OSS CLI and Local Server. Its scope now includes security assessments, compliance, reporting, dashboards, integrations, attack-path analysis, and specialized providers such as IaC.

Adoptionsgeschichte

Prowler grew from an AWS-focused open-source security tool into a multi-provider platform covering major clouds, Kubernetes, GitHub, Microsoft 365, infrastructure as code, and other services. The project now supports CLI, API, local-server, dashboard, container, and GitHub Actions workflows.

Wie es verwendet wird

Run `prowler <provider>` with credentials supplied through that provider's supported environment, CLI, workload-identity, or configuration mechanism. Users can select or exclude checks and services, apply compliance frameworks, target accounts and regions, and generate CSV, JSON-OCSF, HTML, and provider-specific reports.

Warum Paket-Nerds sich dafür interessieren

Prowler makes cloud posture and compliance checks inspectable and runnable as ordinary open-source software rather than a closed scanning service. For package users, one installation provides a large provider-aware check catalog, compliance mappings, remediation guidance, and machine-readable reports suitable for local audits and CI.

Zeitleiste

• 2016: Toni de la Fuente started the Prowler open-source project.
• Later releases expanded the original AWS workflow to multiple clouds, SaaS providers, Kubernetes, and infrastructure-as-code scanning.
• Current project: Prowler OSS includes CLI and Local Server interfaces plus official container and GitHub Actions workflows.

Related projects

• Prowler's IaC provider delegates local and repository infrastructure-code scanning to Trivy.
• The official GitHub Action runs Prowler scans in GitHub workflows using the project's container image.
• Prowler Cloud and Prowler Local Server provide hosted and self-hosted graphical workflows around the same project.

Quellen

• https://docs.prowler.com/getting-started/basic-usage/prowler-cli
• https://docs.prowler.com/user-guide/providers/
• https://github.com/prowler-cloud/prowler#readme
• https://prowler.com/about