1. Home
    2. Prisma
    3. Prisma Cloud
    4. Prisma Cloud Administrator’s Guide (Compute)
    5. Agentless Scanning
    6. Agentless Scanning Modes

    Agentless Scanning Modes

    There are two ways you can set up agentless scanning with Prisma Cloud.
    • Scan all hosts of a cloud account within the same cloud account, or
    • Scan all hosts of a cloud account, called target account, from another dedicated cloud account, called hub account.

    Same Account Mode

    Scan the workloads and container images of a cloud account using the same cloud account. This mode spins up temporary scanning instances in the account.
    2. Prisma Cloud lists instances in each account and creates snapshots for each instance.
    3. Prisma Cloud starts spot instances, called scanners, within the same account, attaches snapshots, and performs the analysis.
    4. Scanners send results to the Prisma Cloud Console.
    5. Scanners and snapshots created by Prisma Cloud are deleted.
    6. Process repeats for periodic scans.

    Hub Account Mode

    Scan the workloads and container images of a cloud account (the target) using another cloud account (the hub). This mode spins up temporary scanning instances in the hub rather than in the target(s).
    2. Prisma Cloud only spins up scanners in the dedicated hub account and attaches snapshots of instances from other accounts to the scanners in the hub account.
    3. Scanners send results to the Prisma Cloud Console
    4. Scanners then get deleted along with the snapshots that Prisma Cloud creates.
    5. Process repeats for periodic scans.

    Recommended For You