Prowler Cloud — The Open Cloud Security Platform, Managed

Prowler Lighthouse AI

Your 24/7 AI Cloud Security Analyst

Ask questions in plain English and get answers grounded in your real findings. Lighthouse AI triages what matters, explains the risk, and walks you through remediation step by step — with conversations that are saved and resumable, and read-only access by design.

Lighthouse AI agentic chat view in Prowler Cloud

Ask in plain English

Query findings conversationally — like “show me all public S3 buckets” — and get answers grounded in your data.

Guided remediation

Step-by-step fixes for every finding, with the commands and console steps included.

Transparent reasoning

Every tool call and reasoning step is visible, so you can trust how the agent reached its answer.

Prowler MCP

Bring Prowler to the AI Tools You Already Use

The managed MCP server at mcp.prowler.com connects Claude, Cursor, and any MCP client to your findings, scans, and the full Prowler knowledge base. Query findings, trigger scans, and pull remediation guidance without leaving your assistant.

Zero installation

Connect to the managed server at mcp.prowler.com with an API key. Nothing to deploy or maintain.

Works with any MCP client

Claude, Cursor, and any MCP-compatible assistant plug straight into Prowler.

Full ecosystem access

Findings, scan orchestration, Prowler Hub, and documentation — all through one server.

Prowler Hub

Know Exactly What Every Check Does

The most comprehensive and deterministic collection of checks for open cloud security: over 1,000 versioned checks and 70+ compliance frameworks, each searchable and explainable down to the code. No more black-box findings — read the logic behind every result.

Prowler Hub check and compliance framework library

1,000+ versioned checks

Browse every check, read its Python source, and pin to a specific version.

70+ compliance frameworks

Explore mappings from CIS and NIST to PCI DSS, SOC 2, and everything in between.

Documented public API

Pull checks and framework definitions into your own dashboards and tooling.

Prowler Private Registry

Your Own Checks, Private to Your Organization

Not every control belongs in a public library. The Private Registry lets your team publish, version, and distribute internal security checks and compliance frameworks across your organization — running alongside the open-source catalog in every scan. Available in Prowler Private Cloud.

Private by default

Internal checks and frameworks stay inside your organization.

Versioned like the Hub

Publish, version, and roll out custom security content across teams.

Runs in every scan

Custom checks execute alongside the open-source catalog automatically.

Get to Zero Criticals in Minutes with the Agentic Cloud Defender