pkg.soopen package index

brew / rank 1649

Install prowler with Homebrew, Nix

Tool for cloud security assessments, audits, incident response, and more. Version 5.47.0 via Homebrew; verified 2026-10-30. Also installable with nix: nix profile install nixpkgs#prowler.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install prowler

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#prowler

nixpkgs package indexes · pkgs/by-name/pr/prowler/package.nix · source: api.github.com

overview

Package summary

Tool for cloud security assessments, audits, incident response, and more

Commands and aliases

  • prowler

history

Project history and usage

Prowler is an open-source cloud security platform and CLI for assessments, compliance audits, incident-response support, reporting, and remediation guidance across cloud and infrastructure providers.

Project history

Toni de la Fuente started Prowler in 2016 to make cloud security assessment open and accessible. It began in the AWS security-auditing niche and developed into an Apache-licensed cloud security platform with checks and compliance frameworks across numerous providers.

The modern repository hosts both Prowler OSS CLI and Local Server. Its scope now includes security assessments, compliance, reporting, dashboards, integrations, attack-path analysis, and specialized providers such as IaC.

Adoption history

Prowler grew from an AWS-focused open-source security tool into a multi-provider platform covering major clouds, Kubernetes, GitHub, Microsoft 365, infrastructure as code, and other services. The project now supports CLI, API, local-server, dashboard, container, and GitHub Actions workflows.

How it is used

Run `prowler <provider>` with credentials supplied through that provider's supported environment, CLI, workload-identity, or configuration mechanism. Users can select or exclude checks and services, apply compliance frameworks, target accounts and regions, and generate CSV, JSON-OCSF, HTML, and provider-specific reports.

Why package nerds care

Prowler makes cloud posture and compliance checks inspectable and runnable as ordinary open-source software rather than a closed scanning service. For package users, one installation provides a large provider-aware check catalog, compliance mappings, remediation guidance, and machine-readable reports suitable for local audits and CI.

Timeline

  • 2016: Toni de la Fuente started the Prowler open-source project.
  • Later releases expanded the original AWS workflow to multiple clouds, SaaS providers, Kubernetes, and infrastructure-as-code scanning.
  • Current project: Prowler OSS includes CLI and Local Server interfaces plus official container and GitHub Actions workflows.

Related projects

  • Prowler's IaC provider delegates local and repository infrastructure-code scanning to Trivy.
  • The official GitHub Action runs Prowler scans in GitHub workflows using the project's container image.
  • Prowler Cloud and Prowler Local Server provide hosted and self-hosted graphical workflows around the same project.

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:cloud

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 5 platform targets.
  • Installs with 7 runtime dependencies.
  • Build metadata lists 5 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
prowlercliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-11-04
manager version5.47.0
manager updated2026-10-30
local dataok
upstreamnot checked
latest detectednot detected

https://prowler.com/

  • infoRelease/tag comparison is only available for GitHub repositories.https://prowler.com/none confidence

install metadata

Package metadata

Package keybrew:prowler
Version5.47.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/prowler
Homepagehttps://prowler.com/
Repositoryhttps://github.com/prowler-cloud/prowler
Upstream docshttps://prowler.com/
LicenseApache-2.0
Source archivehttps://files.pythonhosted.org/packages/62/aa/a07e76bfbdb4ea6d76ea1fc3a2cab5a39867c99d8f8a30984a12240c2a14/prowler-5.47.0.tar.gz
Last updated2026-10-30T16:19:31Z
Pulseupdated
Dependenciescertifi, kingfisher, libsodium, libyaml, lz4, openssl@3, python@3.13
Build dependenciescmake, meson, ninja, pkgconf, rust
Uses from macOSlibffi
Bottleavailable (on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameprowler
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

prowler

nix profile install nixpkgs#prowler
  • normalized package name match
  • Matched by: Prowler
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/pr/prowler/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation