Artifacts

Red-team plugins promptfoo runs against a model, built into Prowler

Dockerfile misconfiguration rules Trivy runs for container images, built into Prowler

Infrastructure-as-code misconfiguration rules Trivy runs, built into Prowler

FedRAMP 20x Key Security Indicators (KSI) 2026, a compliance framework built into Prowler

FedRAMP 20x Class C Rules (FRR) 2026, a compliance framework built into Prowler

Digital Operational Resilience Act (Regulation (EU) 2022/2554), a compliance framework built into Prowler

NCSC Cyber Essentials: Requirements for IT Infrastructure, a compliance framework built into Prowler

CSA Cloud Controls Matrix (CCM) v4.0.13, a compliance framework built into Prowler

Cybersecurity Maturity Model Certification (CMMC) 2.0, a compliance framework built into Prowler

CIS Controls v8.1, a compliance framework built into Prowler

Security checks for the Vercel provider, built into Prowler

Security checks for the STACKIT provider, built into Prowler