Prowler Cloud is a cloud security platform built on the open source Prowler engine. It runs scheduled, configurable scans across AWS, Azure, Google Cloud, Kubernetes, Microsoft 365, GitHub and more, with organization-wide onboarding for AWS, Azure and GCP. Track compliance against CIS, NIST, PCI DSS and every public framework, triage findings, map attack paths, and get alerts via Slack, Jira and email. Includes Lighthouse AI - The Agentic Cloud Defender, RBAC, SAML SSO, Security Hub integration, full API and MCP server.
Free trial. This listing has no AWS Marketplace free trial offer. Instead, sign up at https://cloud.prowler.com to try Prowler Cloud free for 7 days. You don't need an AWS Marketplace subscription to start. When you're ready, subscribe through this listing, either during the trial or when it ends, and connect the subscription to your existing account. Your configuration and findings stay as they are.
Prowler Cloud is a managed cloud security platform operated by the Prowler team, built on the open source Prowler engine. Connect a provider and Prowler Cloud scans it continuously on auto-scaling workers, with no agents to deploy and no infrastructure to run. Onboarding is automated, including AWS external ID generation and whole-organization enrollment for AWS Organizations, Azure Management Groups and GCP Organizations.
PROVIDERS
AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, OpenStack, Cloudflare, Vercel, Microsoft 365, Google Workspace, GitHub, MongoDB Atlas Kubernetes (EKS, AKS, GKE) and more. Check the full list at https://hub.prowler.com
SECURITY AND COMPLIANCE
Unlimited scans with all checks and compliance frameworks from Prowler Hub, covering CIS, NIST 800-53, NIST CSF, PCI DSS, HIPAA, SOC 2, ISO 27001, GDPR, FedRAMP and more.
Prowler ThreatScore and cross-provider compliance views to track posture over time
Attack Paths: identify privilege escalation chains and exploitable misconfiguration combinations, with active queries
Lighthouse AI - The Agentic Cloud Defender: explains findings, prioritizes risk and proposes remediation, with support for multiple LLM providers
OPERATIONS
Scan scheduling and per-provider scan configuration
Findings triage with review status and team notes, finding groups, and simple or advanced mutelists
Your contract covers a fixed number of providers, billed annually through AWS Marketplace. Each provider includes a monthly allowance of unique scanned resources; additional providers and resources beyond the allowance are pay-as-you-go charges on your AWS bill. Current rates and plan details: https://prowler.com/pricing
GETTING STARTED
After subscribing, AWS redirects you to Prowler Cloud to create or sign in to your account and link the purchase. Your first scan runs within minutes of connecting a provider. Please refer to the following guide to complete the registration process: https://docs.prowler.com/cloud/aws-marketplace/
Highlights
Continuous, scheduled security scanning across AWS, Azure, Google Cloud, Kubernetes, Microsoft 365, GitHub and more, built on the open source Prowler engine. Organization-wide onboarding for AWS Organizations, Azure Management Groups and GCP Organizations, with no agents and no infrastructure to run.
Compliance tracking against every public framework, including CIS, NIST 800-53, PCI DSS, HIPAA, SOC 2, ISO 27001, GDPR and FedRAMP, plus attack path analysis to surface privilege escalation chains before an attacker does.
Lighthouse AI - The Agentic Cloud Defender explains findings, prioritizes risk and proposes remediation. Route alerts to Slack, Jira and email, push findings to AWS Security Hub and S3, and connect your own AI agents through the MCP server and full REST API.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This contract charges you by the cloud provider account you protect, billed annually. The providers dimension sets how many provider accounts you connect, so your cost scales with the number of accounts added. A provider account means one cloud account, such as an AWS account. The usage_fee dimension covers Prowler Cloud Consumption Units, which track usage tied to your connected providers. Together, the two dimensions form a per-account subscription: you pick the provider count, and usage is measured in consumption units. Both dimensions reference the vendor pricing page for added detail.
Top-of-mind questions for buyers
What counts as one provider account for billing?
A provider account is one cloud account you connect for scanning. For example, it is one AWS account. For a code repository provider it represents one repository, and for a tenant-based SaaS provider it represents one tenant. Each connected account counts as one billable provider.
What happens to my cost if I add more cloud accounts?
Your cost scales with the number of provider accounts you connect. Each added account raises the provider count and increases your charge accordingly. The pricing is per account, so onboarding whole organizations connects multiple accounts, and each one counts toward your billable providers.
How do the two dimensions combine on my invoice?
The providers dimension drives the base per-account charge and usually accounts for most of your bill. The usage_fee dimension tracks Prowler Cloud Consumption Units tied to your connected providers. Both appear on the same invoice, with the provider count setting the main cost.
prowler.com
Helpful?
Vendor refund policy
Annual contracts are billed upfront through AWS Marketplace and are non-refundable and non-cancellable for the contract term, except where required by law. Pay-as-you-go charges for additional providers or resources are billed monthly in arrears and are non-refundable once incurred. For billing errors or disputes, contact support@prowler.com and we will review and, where a charge is found to be incorrect, issue a refund through AWS Marketplace.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
After subscribing, complete registration at Prowler Cloud to link your AWS Marketplace purchase; if you have trouble activating, contact support with your AWS account ID and we will link the purchase manually.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Prowler Cloud is a cloud security platform built on the open source Prowler engine. It runs scheduled, configurable scans across AWS, Azure, Google Cloud, Kubernetes, Microsoft 365, GitHub and more, with organization-wide onboarding for AWS, Azure and GCP. Track compliance against CIS, NIST, PCI DSS and every public framework, triage findings, map attack paths, and get alerts via Slack, Jira and email. Includes Lighthouse AI - The Agentic Cloud Defender, RBAC, SAML SSO, Security Hub integration, full API and MCP server.
Prowler Private Cloud is the full Prowler cloud security platform, installed in your own AWS account with one CloudFormation template. It runs as containers on Amazon ECS, which is why AWS lists it as a container product; the template sets everything up for you. It checks AWS, Azure, Google Cloud, Kubernetes, Microsoft 365 and more against 2,500+ security checks and 70+ compliance frameworks, including CIS, NIST, PCI DSS, ENS, NIS2 and NATO D32. This bundle covers 10 paid and 15 other cloud accounts every month for 1,000 USD a month, or 9,600 USD for 12 months upfront. Your findings stay in your account and Region, and the charge is on your AWS bill.
Prowler Private Cloud is the full Prowler cloud security platform, installed in your own AWS account with one CloudFormation template. It runs as containers on Amazon ECS, which is why AWS lists it as a container product; the template sets everything up for you. It checks AWS, Azure, Google Cloud, Kubernetes, Microsoft 365 and more against 2,500+ security checks and 70+ compliance frameworks, including CIS, NIST, PCI DSS, ENS, NIS2 and NATO D32. This bundle covers 25 paid and 40 other cloud accounts every month for 2,000 USD a month, or 19,200 USD for 12 months upfront. Your findings stay in your account and Region, and the charge is on your AWS bill.
Prowler Private Cloud is the full Prowler cloud security platform, installed in your own AWS account with one CloudFormation template. It runs as containers on Amazon ECS, which is why AWS lists it as a container product; the template sets everything up for you. It checks AWS, Azure, Google Cloud, Kubernetes, Microsoft 365 and more against 2,500+ security checks and 70+ compliance frameworks, including CIS, NIST, PCI DSS, ENS, NIS2 and NATO D32. Your findings stay in your account and Region. Pay 125 USD per paid account a month, on your AWS bill.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.