Tools
prowler
prowler-cloud/prowler
Prowler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
Topics
Related projects
terraform-aws-secure-baseline1.2kA Terraform module that hardens an AWS account to CIS and AWS Foundational Security baselines, covering IAM, logging, monitoring, networking, and encryption defaults.
hardening1.9kA shell-based Ubuntu hardening script that applies account, audit, AppArmor, cron and package policies, with an extensive Bats test suite for validating the settings.
lynis16.6kLynis is an agentless security auditing and hardening tool for Linux, macOS, and UNIX systems, helping with compliance checks and vulnerability detection.
cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
bearer2.8kBearer is a static application security testing (SAST) CLI that scans source code and data flows to find and prioritize security and privacy risks. Developers run it locally or in CI pipelines.