Solutions Engineer at a media company with 1,001-5,000 employees
MSP
Top 20
Jul 6, 2026
I recently used Prowler for a POC use case rather than a production environment. Prowler enables me to keep my POC environment secure so it is ready for promotion to next environments like production or staging. I primarily use Prowler on my local machine via CLI to scan my platform, mostly for AWS. I use AWS credentials to scan my entire environment. Previously, I ran Prowler on CI/CD by executing the Prowler command in the GitLab runner to scan the whole environment as a pre-scan before deployment to ensure compliance.
We have been using Prowler for one year. The main use case of Prowler is to ensure we are ready with compliance, and we can also check our configurations of cloud environments. We can check our misconfiguration, ensuring we comply with many frameworks like SOC 2 and NIST. Using Prowler, we can check whether our cloud is secure and compliant.We are currently building a SaaS platform, and in production, we have integrated Prowler. When a CISO audit came for that SaaS platform, we downloaded the report from Prowler and sent it to that CISO. Through this approach, we have achieved compliance without logging into cloud accounts. At one time, we discovered that our public S3 buckets were publicly open; using Prowler, we found out that our public buckets were open, and after that, we disabled them to secure our cloud environment. We are not using Prowler day-to-day, but we use it when creating a new cloud account or a new environment. After that, we integrate Prowler, check the configuration, and any time an audit comes, we go to Prowler, download any compliance report we need, and send it to the auditors.
My main use case for Prowler is identifying the vulnerabilities in an infrastructure hosted on AWS. A quick specific example of how I used Prowler to identify vulnerabilities is that in our code build hosted on AWS, we had secrets in plain text that should have been in secrets manager, so it helped us identify the vulnerability that could have caused major problems.
Prowler offers comprehensive capabilities for automated compliance checking and security assessments, making it an indispensable tool in maintaining robust cloud environments.With a focus on security, Prowler provides detailed audits of cloud infrastructure to help organizations identify vulnerabilities and ensure compliance. Its ability to generate thorough reports streamlines the process of maintaining secure and compliant systems, catering to the needs of security-conscious...
I recently used Prowler for a POC use case rather than a production environment. Prowler enables me to keep my POC environment secure so it is ready for promotion to next environments like production or staging. I primarily use Prowler on my local machine via CLI to scan my platform, mostly for AWS. I use AWS credentials to scan my entire environment. Previously, I ran Prowler on CI/CD by executing the Prowler command in the GitLab runner to scan the whole environment as a pre-scan before deployment to ensure compliance.
We have been using Prowler for one year. The main use case of Prowler is to ensure we are ready with compliance, and we can also check our configurations of cloud environments. We can check our misconfiguration, ensuring we comply with many frameworks like SOC 2 and NIST. Using Prowler, we can check whether our cloud is secure and compliant.We are currently building a SaaS platform, and in production, we have integrated Prowler. When a CISO audit came for that SaaS platform, we downloaded the report from Prowler and sent it to that CISO. Through this approach, we have achieved compliance without logging into cloud accounts. At one time, we discovered that our public S3 buckets were publicly open; using Prowler, we found out that our public buckets were open, and after that, we disabled them to secure our cloud environment. We are not using Prowler day-to-day, but we use it when creating a new cloud account or a new environment. After that, we integrate Prowler, check the configuration, and any time an audit comes, we go to Prowler, download any compliance report we need, and send it to the auditors.
My main use case for Prowler is identifying the vulnerabilities in an infrastructure hosted on AWS. A quick specific example of how I used Prowler to identify vulnerabilities is that in our code build hosted on AWS, we had secrets in plain text that should have been in secrets manager, so it helped us identify the vulnerability that could have caused major problems.