Prowler Cloud Pricing vs Self-Hosted Prowler vs Kevra
There are three ways to run Prowler, the open-source cloud security scanner: Prowler Cloud, the open-source project on your own infrastructure, or a managed host like Kevra. The software is the same open-source engine in all three. What differs most is the price model. Prowler Cloud bills per cloud account (Prowler pricing, checked October 23, 2026). Kevra bills a flat monthly fee.
Quick answer
| Prowler Cloud | Self-hosted Prowler | Kevra Security | |
|---|---|---|---|
| Price | USD 99 per cloud account per month | No license fee; you pay for infrastructure and time | USD 49 per month (Starter), USD 89 (Pro) |
| Billing unit | Each AWS account, GCP project, Azure subscription, GitHub repository or Microsoft 365 tenant | None | Flat per plan, unlimited cloud accounts |
| Annual billing | 20% off | n/a | Two months free |
| Who runs it | Prowler | You | Kevra |
Sources: prowler.com/pricing and Kevra Security plans, October 23, 2026.
What it costs at 1, 5 and 20 accounts
Monthly list prices, before annual discounts. Self-hosting is left out of this table because its cost depends on your infrastructure and team; the next section covers it.
| Cloud accounts | Prowler Cloud | Kevra Starter | Kevra Pro |
|---|---|---|---|
| 1 | USD 99 | USD 49 | USD 89 |
| 5 | USD 495 | USD 49 | USD 89 |
| 20 | USD 1,980 | USD 49 | USD 89 |
Kevra Starter runs one scan worker, so scans across many accounts run one after another. Pro runs three in parallel and adds two more Prowler organizations, which helps when you keep production and staging, or several clients, apart.
What self-hosting Prowler costs
The license is free; running it takes work. The official Docker Compose file for the Prowler web app runs eight containers.
- The UI (Next.js) and the API (Django)
- A Celery worker and a scheduler for scans
- PostgreSQL for findings, Valkey for the task queue and Neo4j for attack paths
- An MCP server for AI assistants
Someone has to deploy that, back up the database, put it behind TLS and single sign-on, and keep up with releases. Prowler shipped 65 releases in the twelve months to October 2026, several with database migrations (Prowler releases). Skip upgrades and you fall behind on new checks and compliance frameworks, which is why most teams run a scanner in the first place.
Self-hosting makes sense when you already run similar stacks, need the data inside your own network, or want to change the code.
What you get with each option
| Prowler Cloud | Self-hosted | Kevra Security | |
|---|---|---|---|
| Checks and compliance frameworks | All | All open-source checks and frameworks | All open-source checks and frameworks |
| Scan frequency | Custom schedules | Daily, plus on demand | Daily, plus on demand |
| Jira, AWS Security Hub, Amazon S3 | Yes | Yes | Yes |
| Slack and email alerts | Yes | No | On the roadmap |
| Attack paths, triage, managed AI assistant | Yes | Partial, or bring your own LLM key | No |
| Upgrades and backups | Prowler | You | Kevra |
Which one fits
Prowler Cloud fits if you need its Cloud-only features: custom schedules, alerts, attack paths and the managed AI assistant, or if your vendor review requires Prowler as the direct supplier. The bill grows with every account you add.
Self-hosted Prowler fits if you have a platform team to run an eight-container app and want full control over data and code.
Kevra Security fits if you want the open-source Prowler web app without operating it, and you have more than one or two cloud accounts. A flat price with unlimited accounts is the main difference from Prowler Cloud. Plan details are on the Kevra Security pricing section.
Related: Prowler vs ScoutSuite.
FAQ
How much does Prowler Cloud cost?
Prowler Cloud lists USD 99 per cloud account per month on monthly billing, with 20% off on annual plans. An account is an AWS account, a Google Cloud project, an Azure subscription, a GitHub repository or a Microsoft 365 tenant. There is a 7-day free trial.
Is open-source Prowler free?
Yes. The Prowler CLI, SDK and self-hosted web app are licensed under Apache-2.0. You pay for the infrastructure it runs on and the time it takes to deploy, upgrade and back it up.
Does Kevra charge per cloud account?
No. Kevra Security plans are priced per Prowler organization and scan worker. Starter is USD 49 per month for one organization with unlimited cloud accounts. Pro is USD 89 per month for three organizations and three concurrent scan workers.
Is Kevra Security the same Prowler?
Yes. Kevra runs the open-source Prowler engine, with the same checks and compliance frameworks, and keeps it updated. Features that Prowler sells only in Prowler Cloud are not included.
Which Prowler Cloud features does Kevra not have?
Custom scan schedules, Slack and email alerts, attack path analysis, the triage workflow and the managed AI assistant are Prowler Cloud features. Kevra runs daily scans plus on-demand scans. Alerts and webhooks are on our roadmap.
Can I leave Kevra and run Prowler myself?
Yes. Findings export as CSV and JSON (OCSF), and the engine is the same open-source Prowler you can host yourself.
Managed Prowler without per-account pricing
Connect your cloud accounts with read-only credentials. Setup starts automatically after signup, and we email you when it is ready. Plans start at USD 49 per month with unlimited cloud accounts. Want to try it first? Ask us for a trial.
Prowler is a trademark of its owners. Kevra is not affiliated with, endorsed by or sponsored by Prowler. Kevra Security runs the open-source Prowler project (Apache-2.0) as a managed service.