toniblyx/prowler

Features

• Cloud Auditing Tools - Scans cloud environments to identify security misconfigurations and vulnerabilities across multiple providers.
• Infrastructure Security Scanners - Provides a comprehensive scanner to evaluate cloud configurations and infrastructure templates against security best practices.
• Cloud Security - Provides security auditing capabilities across diverse cloud providers to identify infrastructure vulnerabilities.
• Cloud Infrastructure Security - Automates security and compliance assessments across cloud providers to identify infrastructure misconfigurations.
• Multi-Account Orchestration - Manages the execution of security assessments across multiple cloud provider accounts from a single control plane.
• Attack Path Visualizations - Uses a graph database to map cloud inventory and visualize potential attack paths.
• Cloud Provider Abstraction Layers - Uses a common abstraction layer to execute security checks across multiple cloud platforms through a unified interface.
• Cloud Security Monitoring - Monitors cloud environments in real time to track security status and prioritize critical risk remediation.
• Compliance Verification Tools - Automates the assessment and reporting of cloud infrastructure adherence to international security and regulatory standards.
• Audit and Compliance - Evaluates cloud infrastructure against industry-standard compliance frameworks to ensure regulatory adherence.
• Regulatory Compliance - Performs infrastructure evaluations against legal and regulatory requirements.
• Cloud Compliance Auditors - Evaluates cloud infrastructure against industry-standard regulatory frameworks and security benchmarks.
• Cloud Security Tools - Automates security and compliance assessments across multiple cloud environments to identify vulnerabilities.
• Multi-Account Security Management - Provides a web-based interface for executing scans and visualizing results across multiple cloud provider accounts.
• DevSecOps and Automation - Embeds automated security scans into development workflows to identify vulnerabilities before deployment.
• Security Data Protocols - Implements a context protocol server that allows AI assistants to query security data.
• CI/CD Integrations - Enables the execution of security scans within automated pipelines with standardized report generation.
• Security Posture Dashboards - Provides a web interface for monitoring security posture and mapping attack paths using a graph database.
• Scan Result Exporters - Serializes scan results into industry-standard formats for integration with CI/CD pipelines and PR annotations.
• Customizable Security Checks - Offers built-in security checks that can be customized to identify specific misconfigurations.
• Attack Path Visualizations - Maps cloud inventory into a graph database to visualize potential movement paths for attackers.
• Cloud Attack Path Analysis - Maps cloud inventory and security findings into graph databases to identify potential routes an attacker could take.
• Custom Security Scan Extensions - Offers a pluggable architecture and SDK for adding custom security tests and vulnerability probes.
• Security Finding Management - Provides a graphical interface for tracking and interacting with the results of security and compliance scans.
• Automated Security Scan Triggers - Implements systems for automatically initiating security assessments based on infrastructure changes or discovery events.
• Asset Risk Scoring - Calculates security priority by applying mathematical weights to findings based on criticality and environmental impact.
• Development Kits - Provides a dedicated software development kit for building custom security checks and extensions.
• Real-Time Monitoring Systems - Provides real-time visibility into the security posture of distributed cloud systems.
• Data Visualization - Ships a web-based interface for rendering security scan results as interactive charts, graphs, and dashboards.
• AWS Security - Command-line tool for AWS security assessment and auditing.
• Cloud Platform Security - Assesses and hardens Amazon Web Services accounts via CLI.
• Security Assessment Tools - Performs cloud security best practices assessments and audits.

Star history