Alternatives to Prowler
Check cloud environments for security configuration issues. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Prowler
Check cloud environments for security configuration issues.
Replacements
Listings that take over the same core job as Prowler.
ScubaGear
A CISA PowerShell tool that assesses a Microsoft 365 tenant's configuration against the SCuBA security baselines.
ScubaGear checks Microsoft 365 tenant settings against CISA SCuBA baselines, so it narrows coverage from cloud platforms to Microsoft 365 only.
Maester
An open-source PowerShell test framework that checks a Microsoft 365 tenant's security configuration.
Maester runs over 360 PowerShell tests against a Microsoft 365 and Entra tenant, limited to Microsoft rather than multiple cloud platforms.
CloudFox
Inventory cloud permissions and resources during an authorized assessment.
CloudFox inventories cloud permissions and resources to explain access relationships, geared toward authorized assessments rather than configuration compliance checks.
Similar software
Related functionality, not a direct replacement.
Pacu
AWS exploitation framework for authorised cloud security testing.
Checkov
Scan infrastructure code for configuration problems.
ScubaGoggles
A CISA command-line tool that checks a Google Workspace organization's settings against the SCuBA secure configuration baselines.
Kubescape
Assess Kubernetes configuration and runtime security.
Trivy
Scan software and infrastructure for known security issues.
AzureHound
A command-line collector that exports Microsoft Azure and Entra ID data for analysis in BloodHound.
