Checks Compliances Providers Bundles Artifacts Organizations

Compliances

Browse compliance frameworks supported by Prowler Registry. Filter by cloud provider to find relevant standards.

Prowler Registry

The official registry for Prowler security artifacts. Browse, install, and publish checks, providers, compliances and extensions.

Registry

Artifacts Checks Compliances Providers Bundles Organizations Documentation

Prowler

Website GitHub Registry API Prowler Docs Slack Community

© 2026 Prowler. All rights reserved.

CIS Controls v8.1

v8.1

cis_controls_8.1

25requirements56checks

The CIS Critical Security Controls (CIS Controls) v8.1 are a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are organized into 18 top-level Controls and mapped to three Implementation Groups (IG1, IG2, IG3). This is a cross-provider mapping of Prowler checks to the CIS Controls Safeguards that can be assessed automatically against cloud and platform configurations.

ProwlerOfficialBuilt-inVerifiedprowler-compliance-cis-controlsRun in Prowler Cloud

CIS Microsoft 365 Foundations Benchmark v4.0.0

v4.0

cis_4.0_m365

126requirements78checks

CIS Microsoft 365 Foundations Benchmark v6.0.0

v6.0

cis_6.0_m365

140requirements79checks

CIS Microsoft 365 Foundations Benchmark v7.0.0

v7.0

cis_7.0_m365

160requirements113checks

Cybersecurity Maturity Model Certification (CMMC) 2.0

v2.0

cmmc_2.0

36requirements67checks

FedRAMP 20x Key Security Indicators (KSI) 2026

v2026.07.14.01

fedramp_20x_ksi_2026.07.14.01

15requirements67checks

ISO/IEC 27001 Information Security Management Standard 2022

v2022

iso27001_2022_m365

45requirements81checks

Prowler ThreatScore Compliance Framework for Microsoft 365

v1.0

prowlerthreatscore_1.0_m365

64requirements68checks

The CIS Microsoft 365 Foundations Benchmark provides prescriptive guidance for establishing a secure configuration posture for Microsoft 365 Cloud offerings running on any OS.

ProwlerOfficialBuilt-inVerifiedprowler-provider-m365Run in Prowler Cloud

The CIS Microsoft 365 Foundations Benchmark provides prescriptive guidance for establishing a secure configuration posture for Microsoft 365 Cloud offerings running on any OS. This guide includes recommendations for Exchange Online, SharePoint Online, OneDrive for Business, Teams, Power BI (Fabric) and Microsoft Entra ID.

ProwlerOfficialBuilt-inVerifiedprowler-provider-m365Run in Prowler Cloud

The CIS Microsoft 365 Foundations Benchmark provides prescriptive guidance for establishing a secure configuration posture for Microsoft 365 Cloud offerings running on any OS. This guide includes recommendations for Exchange Online, SharePoint Online, OneDrive for Business, Teams, Power BI (Fabric) and Microsoft Entra ID.

ProwlerOfficialBuilt-inVerifiedprowler-provider-m365Run in Prowler Cloud

The Cybersecurity Maturity Model Certification (CMMC) 2.0 program, codified in 32 CFR Part 170, is the U.S. Department of Defense mechanism to verify that defense contractors protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). It defines three levels: Level 1 (15 basic safeguarding requirements from 48 CFR 52.204-21), Level 2 (the 110 security requirements of NIST SP 800-171 Rev 2) and Level 3 (24 enhanced requirements selected from NIST SP 800-172).

ProwlerOfficialBuilt-inVerifiedprowler-compliance-cmmcRun in Prowler Cloud

FedRAMP 20x Key Security Indicators (KSIs) from the FedRAMP Consolidated Rules for 2026 (release 2026.07.14.01, https://github.com/FedRAMP/rules). KSIs are outcome-oriented indicators that cloud service providers must demonstrate through automation and continuous monitoring; they do not replace the FedRAMP Rules (FRR) program obligations. Class A authorizations mandate a subset of seven KSIs via FRC-CLA-MFR; Classes B and C apply the full catalog within the Minimum Assessment Scope, with five indicators optional on Class B and required on Class C.

ProwlerOfficialBuilt-inVerifiedprowler-compliance-fedramp-20x-ksiRun in Prowler Cloud

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.

ProwlerOfficialBuilt-inVerifiedprowler-provider-m365Run in Prowler Cloud

Prowler ThreatScore Compliance Framework for Microsoft 365 ensures that the Microsoft 365 tenant is compliant taking into account four main pillars: Identity and Access Management, Attack Surface, Forensic Readiness and Encryption

ProwlerOfficialBuilt-inVerifiedprowler-provider-m365Run in Prowler Cloud