Skip to content

Prowler App - Much slower compared to Prowler CLI #7584

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
victor-babin-fti opened this issue Apr 23, 2025 · 3 comments
Open

Prowler App - Much slower compared to Prowler CLI #7584

victor-babin-fti opened this issue Apr 23, 2025 · 3 comments
Labels
bug status/needs-triage Issue pending triage

Comments

@victor-babin-fti
Copy link

Steps to Reproduce

Hi,

I have been using Prowler CLI for a while now to assess number of environments and it always worked really well.

Yesterday, I wanted to give a try using Prowler App instead. I have deployed it using docker on a Debian instance with 8vCPU and 32GB of RAM. The scans performed by Prowler App on small environments work exceptionally well (less than 4 minutes); however, on environments with dozens of thousands of resources, the scans are going to hang forever at 7%, whereas Prowler CLI takes a couple of minutes to scan the exact same environments on lower spec systems.

Expected behavior

Prowler app running just as smooth as Prowler CLI.

Actual Result with Screenshots or Logs

N/A

How did you install Prowler?

Docker (docker pull toniblyx/prowler)

Environment Resource

EC2 instance (t2.2xlarge) - 8vCPU and 32GB
Debian GNU/Linux 12

OS used

Debian GNU/Linux 12

Prowler version

Latest

Pip version

N/A

Context

No response

@victor-babin-fti
Copy link
Author

victor-babin-fti commented Apr 23, 2025

After further investigation, on an environment with 47,000 resources, it took:

  • 16 minutes with Prowler CLI (default configuration)
  • 90 minutes with Prowler App (default configuration)

I am keen to understand why such a big difference and whether Prowler App relies on the same configuration as Prowler CLI to scan? If not, is it possible to increase performance so that Prowler App takes as much time as Prowler CLI

@victor-babin-fti
Copy link
Author

On an environment with 86,000 resources, it took:

  • 53 minutes with Prowler CLI (default configuration)
  • 162 minutes with Prowler App (default configuration)

@victor-babin-fti victor-babin-fti changed the title Prowler App - Scan stuck at 7% Prowler App - Much slower compared to Prowler CLI Apr 23, 2025
@HugoPBrito
Copy link
Member

Hi @victor-babin-fti,

Yes, it’s expected that scans take a bit longer in the app compared to the CLI. The app runs as a full system with multiple components and services (including data persistence, aggregations, and inter-service communication) which naturally introduces some overhead.

If both tests were run on the same machine, there are a few factors to consider: each service consumes CPU and RAM, and communication between services can cause additional delays.

That said, the metrics you shared do seem unusually high. We’ll definitely look into this and work on improving it, since those differences shouldn’t be that large under normal circumstances.

Thanks for reporting this and sharing such useful and interesting data with us!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug status/needs-triage Issue pending triage
Projects
None yet
Development

No branches or pull requests

2 participants