What Prowler is
Prowler is built on top of the most robust open source cloud scanner there is. It's a great option for organizations that want to get started with CSPM scanning, but aren't sure where to start. I'd recommend anyone use it at least once to get an idea of what's in your environment. The vendor site is www.prowler.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Prowler covers
Prowler is in the catalog for these capabilities. Categories: CSPM. Catalog tags: Hands-on, Nerdy, Open Source, and Best for Startups.
How to evaluate Prowler in a security program
Use Prowler as a stack candidate, not as diligence evidence. The oneNorma score for Prowler is 6/10 (percentile 83). If the real gap is in CSPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.prowler.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
