Checks Compliances Providers Bundles Artifacts Organizations

Compliances

Browse compliance frameworks supported by Prowler Registry. Filter by cloud provider to find relevant standards.

Prowler Registry

The official registry for Prowler security artifacts. Browse, install, and publish checks, providers, compliances and extensions.

Registry

Artifacts Checks Compliances Providers Bundles Organizations Documentation

Prowler

Website GitHub Registry API Prowler Docs Slack Community

© 2026 Prowler. All rights reserved.

CIS Controls v8.1

v8.1

cis_controls_8.1

22requirements44checks

The CIS Critical Security Controls (CIS Controls) v8.1 are a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are organized into 18 top-level Controls and mapped to three Implementation Groups (IG1, IG2, IG3). This is a cross-provider mapping of Prowler checks to the CIS Controls Safeguards that can be assessed automatically against cloud and platform configurations.

ProwlerOfficialBuilt-inVerifiedprowler-compliance-cis-controlsRun in Prowler Cloud

CIS Oracle Cloud Infrastructure Foundations Benchmark v3.0.0

v3.0

cis_3.0_oraclecloud

54requirements50checks

CIS Oracle Cloud Infrastructure Foundations Benchmark v3.1.0

v3.1

cis_3.1_oraclecloud

54requirements51checks

CSA Cloud Controls Matrix (CCM) v4.0.13

v4.0

csa_ccm_4.0

45requirements50checks

Cybersecurity Maturity Model Certification (CMMC) 2.0

v2.0

cmmc_2.0

32requirements41checks

SecNumCloud Referentiel d'Exigences v3.2

v3.2

secnumcloud_3.2_oraclecloud

92requirements46checks

The CIS Oracle Cloud Infrastructure Foundations Benchmark provides prescriptive guidance for configuring security options for Oracle Cloud Infrastructure with an emphasis on foundational, testable, and architecture agnostic settings.

ProwlerOfficialBuilt-inVerifiedprowler-provider-oraclecloudRun in Prowler Cloud

The CIS Oracle Cloud Infrastructure Foundations Benchmark provides prescriptive guidance for configuring security options for Oracle Cloud Infrastructure with an emphasis on foundational, testable, and architecture agnostic settings.

ProwlerOfficialBuilt-inVerifiedprowler-provider-oraclecloudRun in Prowler Cloud

The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) is a cybersecurity control framework for cloud computing, composed of 197 control objectives structured in 17 domains covering all key aspects of cloud technology. The CCM can be used as a tool for the systematic assessment of a cloud implementation, and provides guidance on which security controls should be implemented by which actor within the cloud supply chain.

ProwlerOfficialBuilt-inVerifiedprowler-compliance-csa-ccmRun in Prowler Cloud

The Cybersecurity Maturity Model Certification (CMMC) 2.0 program, codified in 32 CFR Part 170, is the U.S. Department of Defense mechanism to verify that defense contractors protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). It defines three levels: Level 1 (15 basic safeguarding requirements from 48 CFR 52.204-21), Level 2 (the 110 security requirements of NIST SP 800-171 Rev 2) and Level 3 (24 enhanced requirements selected from NIST SP 800-172).

ProwlerOfficialBuilt-inVerifiedprowler-compliance-cmmcRun in Prowler Cloud

The SecNumCloud framework is published by ANSSI (Agence Nationale de la Securite des Systemes d'Information) to qualify cloud service providers operating in France. Version 3.2, dated March 8, 2022, covers IaaS, CaaS, PaaS, and SaaS services with requirements spanning information security policies, access control, cryptography, physical security, operational security, communications security, and data sovereignty protections against extra-European law.

ProwlerOfficialBuilt-inVerifiedprowler-provider-oraclecloudRun in Prowler Cloud