Skip to content

Forged in Fire: Forging Multi-Cloud Open Source Swiss-Army Knife

Toni de la FuenteSergio Garcia

Cloudfwd:cloudsec North America45 minIntermediateOpen on YouTube ↗

Toni de la Fuente details Forged in Fire: Forging Multi-Cloud Open Source Swiss-Army Knife.

Summary

Prowler's origin story

Tony deaa and Sergio Garcia from Prowler describe how a bash-based AWS audit script grew into a multi-cloud open-source security platform. They frame the core practitioner questions: what assets exist across clouds, where sensitive data lives, who has access, and how identity and resource relationships connect across accounts.

From bash to Python rewrite

The project gained traction after Black Hat EU Arsenal demos and thousands of GitHub stars. After the founder joined AWS, Prowler expanded AWS checks, then the team rewrote the tool in Python because shell portability across Linux, BSD, and macOS had become unmaintainable.

Multi-cloud Swiss army knife

Today Prowler targets consistent visibility and remediation workflows across providers, supporting automated fixes, click-ops, and scripted remediation. The talk positions open source as the right model for cloud security communities that need shared, auditable assessment tooling.

Related talks