Pricing

Start free. Pay only for the cloud accounts you protect.

Start a 15-day free trial of Prowler Cloud with no credit card and no limit on cloud accounts. Connect every account you want to evaluate and see prioritized findings in minutes. Upgrade yourself when you are ready, monthly or annual, or buy through AWS Marketplace.

  • 15-day free trial
  • No cloud account limit
  • No credit card to start
  • No commitment on monthly plans
  • Save 20% with annual billing
  • SOC 2 Type 2

Free trial

Try Prowler Cloud on your own accounts before you pay anything.

$0for 15 days
no cloud account limit
Run your free scan
  • Connect as many cloud accounts as you need
  • Every check and compliance framework in Prowler Hub
  • Unlimited use for analyzing, prioritizing and remediating findings
  • Upgrade in the platform at any time

Prowler Cloud

POPULAR

Hosted and maintained by Prowler. Continuous security and compliance for growing teams.

$99per cloud account / month
billed monthly

Estimated $495 / month at list price

Start your 15-day free trial Buy with AWS Marketplace

Everything in the free trial, plus

  • Onboarding of whole AWS Organizations, Azure Management Groups and GCP Organizations
  • Custom scan schedules, scan configuration, partial scans and rescans of a single finding
  • Continuous compliance across 70+ frameworks, including NATO D32
  • Lighthouse AI, the Autonomous Fixer and an MCP Server for your AI agents
  • Triage workflow, full attack paths and compliance watchlists
  • Jira, Power BI, email and Slack
  • SAML SSO, plus Google and GitHub login
  • SOC 2 Type 2 and enterprise support
See everything included ↓

Prowler Private Cloud

Deployed in your own environment: cloud, data center or air-gapped.

Customtailored to your organization
Talk to us

Everything in Prowler Cloud, plus

  • Deployment in your cloud, your data center or air-gapped
  • Data residency of your choice and unlimited resources
  • Prowler Local Registry
  • VMware VCF controls and compliance
  • AWS Security Lake (Parquet) and custom SIEM integration
  • White glove onboarding, a Technical Account Manager and a dedicated CSM

Everything in Prowler Cloud

Every Prowler Cloud plan includes all of this, on top of every check and compliance framework.

Onboarding

  • AWS Organizations
  • Azure Management Groups
  • GCP Organizations

Scan customization

  • Custom schedules: daily, weekly, bi-weekly or monthly, at the time you choose
  • Scan configuration: enable or disable checks and services, custom controls, finding enrichment, throttling and more
  • Partial scans and rescans of a single finding

Triage

  • Finding notes
  • Statuses: Open, Under review, Remediating, Risk Accepted and False Positive. The last two mute findings automatically
  • Record manual findings as PASS with evidence

Import findings

  • From the Prowler CLI
  • From the Prowler Cloud API

Alerts

  • Email
  • Slack

Lighthouse AI

  • Side chat
  • Contextual skills: Fix, Triage Decision, Systemic Scope and Compliance Impact
  • Prowler Autonomous Fixer

MCP Server

  • Tools for every premium feature
  • Connect any agent with an API key

Attack paths

  • Full end-to-end graph
  • Show only the impacted resources

Compliance

  • Custom watchlists
  • Grouped by provider or by provider type
  • NATO D32 framework for AWS, Azure and GCP

Integrations

  • Jira, with a group of findings in a single ticket
  • Power BI compliance dashboards

Single sign-on

  • SAML for multiple domains: Okta, Entra ID and more
  • Google and GitHub login

Private Registry

  • Private artifacts: custom controls, cloud providers and compliance frameworks

Prowler Private Cloud adds a Local Registry and VMware VCF controls and compliance, deployed in your own environment.

Open source

Prowler Open Source is free, forever.

The Apache-2.0 CLI, SDK and self-hosted Local Server run every check on every provider, from your terminal, CI/CD or from inside Kubernetes. Already running the CLI? Ship its findings to Prowler Cloud to use Lighthouse AI, alerts, integrations and dashboards.

MSPs and MSSPs

Bring a customer, become a partner.

Run every customer from one multi-tenant Prowler environment, with consolidated billing, deal registration, partner pricing and co-marketing.

What you add at each step

Every edition runs the same open-source engine. Upgrading changes who operates it and how much of the work it does for you.

Open SourceProwler CloudPrivate Cloud
Who runs itYou, on a laptop, in CI/CD, inside Kubernetes or self-hosted as Local ServerHosted and maintained by Prowler, with auto-scaling scansDeployed in your own cloud, data center or air-gapped environment
Find2,500+ checks, growing every day, across every provider and all public frameworksPlus custom scan schedules, one-step onboarding of whole AWS, Azure and GCP organizations, NATO D32 and a Private Registry for your own checks and frameworksPlus a Local Registry and VMware VCF controls and compliance
PrioritizeThreatScore and basic attack paths for AWSPlus Lighthouse AI, the full attack path graph and Censys external validationEverything in Prowler Cloud
FixRemediation guidance on every finding and a MutelistPlus the Autonomous Fixer, a triage lifecycle with notes, automatic muting and manual findings with evidenceEverything in Prowler Cloud
Work as a teamReports, AWS Security Hub, GitHub Action and SARIFPlus Jira, Slack and email alerts, Power BI, the API, an MCP Server for your AI agents and SAML SSOPlus AWS Security Lake (Parquet) and custom SIEM integration
Trust & supportCommunity supportSOC 2 Type 2, backup, DDoS protection and enterprise supportPlus data residency of your choice, white glove onboarding, a TAM and a dedicated CSM

Compare every feature

Show the full feature list
FeatureOpen SourceProwler CloudPrivate Cloud
Scanning & coverage
Cloud infrastructure posture scanningAWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, OpenStack, Cloudflare, Vercel
Infrastructure as CodeTerraform, CloudFormation, Helm, Kubernetes manifests, GitHub Actions
SaaS posture scanningMicrosoft 365, Google Workspace, GitHub, MongoDB Atlas
Kubernetes posture scanningEKS, AKS, GKE, local or remote clusters and AWS ECS
Container image scanning
All public compliance frameworks
Real-time event-driven detection (soon)
Onboarding & scans
AWS Organizations, Azure Management Groups, GCP OrganizationsDiscover and onboard every account at once
Scheduled scansDaily, weekly, bi-weekly or monthly, at the time you choose
Enable or disable checks and services, custom controls
Finding enrichment and scan throttling
Partial scans and rescans of a single finding
Import findings from the Prowler CLI and the Prowler Cloud APIUse the CLI as a local agent for Prowler Cloud
Prioritize & fix
Prowler ThreatScore0–100 risk prioritization and executive reporting
Attack path for AWSBasic attack path analysis
Full end-to-end attack path graphOption to show only impacted resources
Lighthouse AI side chat and skillsFix, Triage Decision, Systemic Scope, Compliance Impact
Prowler Autonomous FixerGuided remediation for cloud misconfigurations
External threat validation with Censys
Triage & collaboration
Simple and advanced MutelistIndividual and bulk muting with justifications
Finding notes and status lifecycleOpen, Under review, Remediating, Risk Accepted, False Positive. The last two mute findings automatically
Record manual findings as PASS with evidence
Email and Slack alerts
Jira integrationSend a group of related findings to one ticket
Custom compliance watchlistsGrouped by provider or by provider type
NATO D32 compliance framework for AWS, Azure and GCP
Microsoft Power BI compliance dashboards
Platform, API & AI agents
Dashboards, resource inventory, reports and exportsCSV, JSON-OCSF, HTML and compliance CSV
API keys, Prowler SDK, GitHub Action and SARIF
AWS Security Hub integration
Prowler Cloud API and remote MCP ServerMCP tools for all premium features. Connect any agent with an API key
Prowler Private RegistryPrivate artifacts: custom controls, cloud providers and compliance frameworks
SAML SSO for multiple domainsOkta, Entra ID and more
OAuth social login with Google and GitHub
AWS Marketplace subscription and private contracts
Private Cloud only
Deploy in your own VPC or data centerData residency of your choice, including air-gapped environments
Prowler Local RegistryCustom controls, cloud providers and compliance frameworks, kept inside your environment
VMware VCF controls and compliance
AWS Security Lake (Parquet) and custom SIEM integration
Security & support
SOC 2 Type 2, auto-scaling, multi-tenancy, backup and DDoS protection
Enterprise supportOpen source includes community support
White glove onboarding, Technical Account Manager, dedicated CSM

Try Prowler Cloud free for 15 days.

Connect as many cloud accounts as you need, run every check and see prioritized findings in minutes. No credit card.

Run your free scan

Trusted by the world's most innovative teams

Answers to common questions

Whether you’re a small startup, a growing mid-sized business, or a large enterprise, we’re here to make things simple and support you at every step.

How do you define a cloud account?
Is Prowler available on AWS Marketplace?
Does Prowler offer monthly and annual billing options?
How does your annual plan work?
How are resources counted?
What kind of support options are available?
Are additional services available?
What happens when I delete my account?
What do I get with Free Trial?

Let’s talk — we’re here to help

Have a question, idea, or just want to say hello? Reach out and our team will get back to you shortly.