Base
Hardened build
minimal ports, security patches applied at build time
Prowler
Azure
Security
1 variation
multi cloud security assessment from cloudimg, ready to scan your accounts on first boot
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| Prowler on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
Prowler is an open source security assessment tool that audits a cloud account against hundreds of security controls and reports exactly which pass, which fail, and which compliance requirements each one maps to. It covers Azure, AWS, Google Cloud, Kubernetes, Microsoft 365 and more from a single command line, and maps its findings onto published frameworks including CIS, PCI DSS, HIPAA, SOC 2, ISO 27001, NIST and FedRAMP. It reads and reports only: an assessment never modifies the account it audits.
Why the cloudimg image
Ships with no cloud credentials of any kind, by design, so you attach your own read only identity and nothing is ever baked in. Includes the trivy dependency Prowler's infrastructure as code scanning genuinely requires, installed so it stays patchable, plus example fixtures that let you prove the scanner produces real findings before you connect any account. Scheduled assessments are pre wired and fail closed, refusing to run rather than emitting a clean looking report from a scanner that has been tampered with. Paired deploy guide and 24/7 support.
Common uses
- Audit cloud accounts against CIS, PCI DSS, HIPAA and other frameworks
- Scan infrastructure as code for misconfigurations before it ships
- Run scheduled security assessments and track posture over time
More in Security
2F
2FAuth
Security
2FAuth, a self hosted vault for your two factor authentication accounts that stores the secrets and generates the one ti
Ad
acme-dns
Security
acme-dns, a limited scope DNS server with a REST API, purpose built to answer ACME DNS-01 challenges without exposing yo
addy.io
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
AliasVault
Security
AliasVault, an open source end to end encrypted password manager and private email alias service, secured on first boot.
Apache Directory
Security
Apache Directory Server, an extensible LDAP and Kerberos directory, ready to authenticate on first boot.
Apache SpamAssassin
Security
Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your ma