diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index b3309a80d1..5c917d3198 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -4,6 +4,18 @@ All notable changes to the **Prowler API** are documented in this file. +## [1.34.0] (Prowler v5.33.0) + +### 🚀 Added + +- Compliance PDF reports no longer require provider credentials: findings are enriched from the provider metadata stored in the database, so reports generate even after the provider secret is deleted or its credentials become invalid [(#11845)](https://github.com/prowler-cloud/prowler/pull/11845) + +### 🐞 Fixed + +- Provider scans now queue behind active provider scans instead of dispatching concurrently, and resource failed-finding counters retry database conflicts with stable row locking [(#11848)](https://github.com/prowler-cloud/prowler/pull/11848) + +--- + ## [1.33.1] (Prowler v5.32.1) ### 🐞 Fixed diff --git a/api/changelog.d/11845.added.md b/api/changelog.d/11845.added.md deleted file mode 100644 index 7492a8c0fd..0000000000 --- a/api/changelog.d/11845.added.md +++ /dev/null @@ -1 +0,0 @@ -Compliance PDF reports no longer require provider credentials: findings are enriched from the provider metadata stored in the database, so reports generate even after the provider secret is deleted or its credentials become invalid diff --git a/api/changelog.d/11848.fixed.md b/api/changelog.d/11848.fixed.md deleted file mode 100644 index 99f52471a2..0000000000 --- a/api/changelog.d/11848.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Provider scans now queue behind active provider scans instead of dispatching concurrently, and resource failed-finding counters retry database conflicts with stable row locking diff --git a/docs/docs.json b/docs/docs.json index 0de5e1ff09..3cb0b3dec9 100644 --- a/docs/docs.json +++ b/docs/docs.json @@ -70,7 +70,7 @@ { "group": "Prowler Lighthouse AI", "pages": [ - "getting-started/products/prowler-lighthouse-ai" + "getting-started/products/prowler-cloud-lighthouse" ] }, { @@ -154,8 +154,15 @@ ] }, { - "group": "Lighthouse AI", + "group": "Lighthouse AI (Prowler Cloud)", "pages": [ + "user-guide/tutorials/prowler-cloud-lighthouse-multi-llm" + ] + }, + { + "group": "Lighthouse AI (Open Source)", + "pages": [ + "getting-started/products/prowler-lighthouse-ai", "user-guide/tutorials/prowler-app-lighthouse", "user-guide/tutorials/prowler-app-lighthouse-multi-llm" ] diff --git a/docs/getting-started/products/prowler-cloud-lighthouse.mdx b/docs/getting-started/products/prowler-cloud-lighthouse.mdx new file mode 100644 index 0000000000..740ba969a9 --- /dev/null +++ b/docs/getting-started/products/prowler-cloud-lighthouse.mdx @@ -0,0 +1,86 @@ +--- +title: 'Overview' +--- + +import { SubscriptionBanner } from "/snippets/subscription-banner.mdx" + +Prowler Cloud runs an enhanced version of Lighthouse AI in Open Source repository, the Agentic Cloud Defender that helps teams understand, prioritize, and remediate security findings across cloud environments. + + + +Lighthouse AI on Prowler Cloud + +## What's New + +The Agentic Cloud Defender does more than answer questions, it helps teams **find and remediate what actually matters**, cutting through the noise to focus on the risk that counts. Prowler Cloud sharpens Lighthouse AI with the following improvements over the open-source version: + + + + Conversations are saved and can be revisited or resumed at any time. + + + An upgraded default model delivers stronger reasoning and tool calling. + + + Switch between the standard interface and a chat-first agentic view. + + + Credentials are validated automatically when a provider is configured. + + + +## Chat View + +Lighthouse AI is no longer a separate section in the left navigation. Prowler Cloud now offers two application views: a normal view for browsing dashboards, findings, and configuration, and an agentic chat view, powered by Lighthouse AI, for conversational, multi-step security analysis. Conversations are saved automatically, so earlier sessions can be reopened and resumed at any time. + +Promoting the chat to a top-level view gives Lighthouse AI the room it needs for a fully agentic workflow and makes the Agentic Cloud Defender a primary way to work in Prowler Cloud. + +Lighthouse AI chat view in Prowler Cloud + +### Tool Usage + +Lighthouse AI on Prowler Cloud renders the agent's work as it happens, so responses are easier to follow and to trust. Tool calls and reasoning steps appear in the order they occur within the conversation. + +- **Ordered steps:** Tool calls and reasoning are shown in sequence, reflecting how the agent reached its answer. +- **Tool visibility:** The data tools invoked to retrieve findings and other Prowler information are displayed as the agent uses them. +- **Thought process:** The agent's reasoning is presented alongside its actions, and can be expanded to review the full chain of steps. + +Ordered tool usage and reasoning in the Lighthouse AI chat + +## Configuration + +Configure Lighthouse AI on Prowler Cloud from **Configuration** → **Lighthouse AI**: + +1. Click the desired provider (OpenAI, Amazon Bedrock, or OpenAI Compatible). +2. Enter the required credentials. +3. Click **Save**. The connection is validated automatically before the provider becomes available. + +Lighthouse AI configuration page in Prowler Cloud + +### Business Context + +At the top of the configuration page, the optional **Business Context** field lets teams add environment priorities, compliance requirements, and ownership details, so responses align with organizational needs. + +Lighthouse AI on Prowler Cloud supports OpenAI, Amazon Bedrock, and OpenAI-compatible providers, with GPT-5.5 as the default. For per-provider setup and how to switch the default provider or model, see [Using Multiple LLM Providers](/user-guide/tutorials/prowler-cloud-lighthouse-multi-llm). + +## FAQ + +**Which LLM providers are supported?** + +OpenAI (GPT models, including the default GPT-5.5), Amazon Bedrock (Claude, Llama, Titan, and others), and any OpenAI-compatible service such as OpenRouter. + +**Can Lighthouse AI change my cloud environment?** + +No. Lighthouse AI has read-only access to security data and no tools to modify resources, even when the connected cloud credentials would allow changes. + +## Looking for the Open Source Version? + +Lighthouse AI is also available in the self-hosted, open-source Prowler App. For its capabilities, FAQs, and limitations, see the open-source documentation. + + + Capabilities, FAQs, and limitations for Lighthouse AI in the open-source Prowler App + + +## Getting Help + +For issues or suggestions with Lighthouse AI on Prowler Cloud, request support at [support.prowler.com](https://support.prowler.com) or [reach out through our Slack channel](https://goto.prowler.com/slack). diff --git a/docs/getting-started/products/prowler-lighthouse-ai.mdx b/docs/getting-started/products/prowler-lighthouse-ai.mdx index 4e2eed8538..6cb6edf502 100644 --- a/docs/getting-started/products/prowler-lighthouse-ai.mdx +++ b/docs/getting-started/products/prowler-lighthouse-ai.mdx @@ -8,11 +8,16 @@ import { VersionBadge } from "/snippets/version-badge.mdx" Prowler Lighthouse AI is a Cloud Security Analyst chatbot that helps you understand, prioritize, and remediate security findings in your cloud environments. It's designed to provide security expertise for teams without dedicated resources, acting as your 24/7 virtual cloud security analyst. -Prowler Lighthouse +Prowler Lighthouse - - Learn how to configure Lighthouse AI with your preferred LLM provider - + + + Discover the enhanced Cloud experience: persistent chat sessions, GPT-5.5 by default, a dedicated agentic view, and transparent reasoning + + + Learn how to configure Lighthouse AI with your preferred LLM provider + + ## Capabilities @@ -26,7 +31,7 @@ Ask questions in plain English about your security findings. Examples: - "Show me all S3 buckets with public access." - "What security issues were found in my production accounts?" -Natural language querying +Natural language querying ### Detailed Remediation Guidance @@ -36,7 +41,7 @@ Get tailored step-by-step instructions for fixing security issues: - Commands or console steps to implement fixes - Alternative approaches with different solutions -Detailed Remediation +Detailed Remediation ### Enhanced Context and Analysis @@ -46,9 +51,9 @@ Lighthouse AI can provide additional context to help you understand the findings - Provide risk assessments based on your environment and context - Connect related findings to show broader security patterns -Business Context +Business Context -Contextual Responses +Contextual Responses ## Important Notes diff --git a/docs/images/prowler-app/lighthouse-config.png b/docs/images/prowler-app/lighthouse/oss/config.png similarity index 100% rename from docs/images/prowler-app/lighthouse-config.png rename to docs/images/prowler-app/lighthouse/oss/config.png diff --git a/docs/images/prowler-app/lighthouse-configuration.png b/docs/images/prowler-app/lighthouse/oss/configuration.png similarity index 100% rename from docs/images/prowler-app/lighthouse-configuration.png rename to docs/images/prowler-app/lighthouse/oss/configuration.png diff --git a/docs/images/prowler-app/lighthouse-feature1.png b/docs/images/prowler-app/lighthouse/oss/feature1.png similarity index 100% rename from docs/images/prowler-app/lighthouse-feature1.png rename to docs/images/prowler-app/lighthouse/oss/feature1.png diff --git a/docs/images/prowler-app/lighthouse-feature2.png b/docs/images/prowler-app/lighthouse/oss/feature2.png similarity index 100% rename from docs/images/prowler-app/lighthouse-feature2.png rename to docs/images/prowler-app/lighthouse/oss/feature2.png diff --git a/docs/images/prowler-app/lighthouse-feature3.png b/docs/images/prowler-app/lighthouse/oss/feature3.png similarity index 100% rename from docs/images/prowler-app/lighthouse-feature3.png rename to docs/images/prowler-app/lighthouse/oss/feature3.png diff --git a/docs/images/prowler-app/lighthouse-intro.png b/docs/images/prowler-app/lighthouse/oss/intro.png similarity index 100% rename from docs/images/prowler-app/lighthouse-intro.png rename to docs/images/prowler-app/lighthouse/oss/intro.png diff --git a/docs/images/prowler-app/lighthouse-set-default-provider.png b/docs/images/prowler-app/lighthouse/oss/set-default-provider.png similarity index 100% rename from docs/images/prowler-app/lighthouse-set-default-provider.png rename to docs/images/prowler-app/lighthouse/oss/set-default-provider.png diff --git a/docs/images/prowler-app/lighthouse-switch-models.png b/docs/images/prowler-app/lighthouse/oss/switch-models.png similarity index 100% rename from docs/images/prowler-app/lighthouse-switch-models.png rename to docs/images/prowler-app/lighthouse/oss/switch-models.png diff --git a/docs/images/prowler-app/lighthouse/prowler-cloud/chat-animation.gif b/docs/images/prowler-app/lighthouse/prowler-cloud/chat-animation.gif new file mode 100644 index 0000000000..c2e69c4816 Binary files /dev/null and b/docs/images/prowler-app/lighthouse/prowler-cloud/chat-animation.gif differ diff --git a/docs/images/prowler-app/lighthouse/prowler-cloud/config-page.png b/docs/images/prowler-app/lighthouse/prowler-cloud/config-page.png new file mode 100644 index 0000000000..ad1b812e03 Binary files /dev/null and b/docs/images/prowler-app/lighthouse/prowler-cloud/config-page.png differ diff --git a/docs/images/prowler-app/lighthouse/prowler-cloud/main-chat-page.png b/docs/images/prowler-app/lighthouse/prowler-cloud/main-chat-page.png new file mode 100644 index 0000000000..7a83637285 Binary files /dev/null and b/docs/images/prowler-app/lighthouse/prowler-cloud/main-chat-page.png differ diff --git a/docs/images/prowler-app/lighthouse/prowler-cloud/tool-usage.png b/docs/images/prowler-app/lighthouse/prowler-cloud/tool-usage.png new file mode 100644 index 0000000000..ae637b3ff3 Binary files /dev/null and b/docs/images/prowler-app/lighthouse/prowler-cloud/tool-usage.png differ diff --git a/docs/user-guide/tutorials/prowler-app-lighthouse-multi-llm.mdx b/docs/user-guide/tutorials/prowler-app-lighthouse-multi-llm.mdx index 0a0179ee79..cdc6e84b9a 100644 --- a/docs/user-guide/tutorials/prowler-app-lighthouse-multi-llm.mdx +++ b/docs/user-guide/tutorials/prowler-app-lighthouse-multi-llm.mdx @@ -32,13 +32,13 @@ All three providers can be configured for a tenant, but only one can be set as t When visiting Lighthouse AI chat, the default provider's default model loads automatically. Users can switch to any available LLM model (including those from non-default providers) using the dropdown in chat. -Switch models in Lighthouse AI chat interface +Switch models in Lighthouse AI chat interface ## Configuring Providers Navigate to **Configuration** → **Lighthouse AI** to see all three provider options with a **Connect** button under each. -Prowler Lighthouse Configuration +Prowler Lighthouse Configuration ### Connecting a Provider @@ -139,7 +139,7 @@ To set a different provider as default: 2. Click **Configure** under the desired provider to set as default 3. Click **Set as Default** -Set default LLM provider +Set default LLM provider ## Updating Provider Credentials diff --git a/docs/user-guide/tutorials/prowler-app-lighthouse.mdx b/docs/user-guide/tutorials/prowler-app-lighthouse.mdx index b119893cb5..0930be8aa8 100644 --- a/docs/user-guide/tutorials/prowler-app-lighthouse.mdx +++ b/docs/user-guide/tutorials/prowler-app-lighthouse.mdx @@ -8,6 +8,10 @@ import { VersionBadge } from "/snippets/version-badge.mdx" Prowler Lighthouse AI integrates Large Language Models (LLMs) with Prowler security findings data. + +Using Prowler Cloud? Lighthouse AI on Prowler Cloud adds persistent chat sessions, GPT-5.5 as the default model, a dedicated agentic (chat) view, and transparent reasoning. See [Lighthouse AI on Prowler Cloud](/getting-started/products/prowler-cloud-lighthouse). + + Behind the scenes, Lighthouse AI works as follows: - Lighthouse AI runs as a [Langchain agent](https://docs.langchain.com/oss/javascript/langchain/agents) in NextJS @@ -47,7 +51,7 @@ Getting started with Prowler Lighthouse AI is easy: For detailed configuration instructions for each provider, see [Using Multiple LLM Providers with Lighthouse](/user-guide/tutorials/prowler-app-lighthouse-multi-llm). -Lighthouse AI Configuration +Lighthouse AI Configuration ### Adding Business Context diff --git a/docs/user-guide/tutorials/prowler-cloud-lighthouse-multi-llm.mdx b/docs/user-guide/tutorials/prowler-cloud-lighthouse-multi-llm.mdx new file mode 100644 index 0000000000..ea19b1fe7f --- /dev/null +++ b/docs/user-guide/tutorials/prowler-cloud-lighthouse-multi-llm.mdx @@ -0,0 +1,81 @@ +--- +title: 'Using Multiple LLM Providers' +--- + +import { SubscriptionBanner } from "/snippets/subscription-banner.mdx" + +Lighthouse AI on Prowler Cloud supports multiple Large Language Model (LLM) providers, so teams can choose the option that best fits their infrastructure, compliance requirements, and cost considerations. This guide explains how to configure and manage providers for Lighthouse AI on Prowler Cloud. + + + +For a feature overview, see [Lighthouse AI on Prowler Cloud](/getting-started/products/prowler-cloud-lighthouse). + +## Supported Providers + +- **OpenAI:** GPT models, including the default GPT-5.5. +- **Amazon Bedrock:** AWS-hosted access to Claude, Llama, Titan, and other models. +- **OpenAI Compatible:** Any service exposing an OpenAI-compatible API endpoint, such as OpenRouter. + +## Model Requirements + +Lighthouse AI requires models that support all of the following: + +- **Text input:** Ability to receive text prompts. +- **Text output:** Ability to generate text responses. +- **Tool calling:** Ability to invoke tools to retrieve data from Prowler. + +Models without these capabilities are not going to work well. + +## Configuring Providers + +Navigate to **Configuration** → **Lighthouse AI** to see the available providers, each with its own connection option. + +To connect a provider: + +1. Click the desired provider. +2. Enter the required credentials. +3. Click **Save**. The connection is validated automatically before the provider becomes available. + +Lighthouse AI configuration page in Prowler Cloud + +The required information differs per provider: + + + + - **API Key:** OpenAI API key (starts with `sk-` or `sk-proj-`), created from the [OpenAI platform](https://platform.openai.com/api-keys). + + Confirm the OpenAI account has sufficient credits and that the default GPT-5.5 model is not blocked in the organization settings. + + + Connect using either an Amazon Bedrock API key or AWS IAM credentials. + + **Amazon Bedrock API key** + - **Bedrock API Key:** The key generated from Amazon Bedrock. + - **AWS Region:** Region where Bedrock is available. + + **AWS IAM Access Keys** + - **AWS Access Key ID** and **AWS Secret Access Key** for the IAM user. + - **AWS Region:** Region where Bedrock is available. + - The IAM user requires the `AmazonBedrockLimitedAccess` managed policy. + + + Connect to any service exposing an OpenAI-compatible API endpoint that Prowler Cloud can reach over the Internet. + + - **API Key:** API key from the compatible service. + - **Base URL:** API endpoint URL including the version (for example, `https://openrouter.ai/api/v1`). + + ### Example: OpenRouter + + 1. Create an account at [OpenRouter](https://openrouter.ai/). + 2. Generate an API key from the OpenRouter dashboard. + 3. Enter the API key and set the base URL to `https://openrouter.ai/api/v1`. + + + +## Model Recommendations + +GPT-5.5 is the default and recommended model for Lighthouse AI on Prowler Cloud. Models from Amazon Bedrock and OpenAI-compatible endpoints can also be used, but performance is not guaranteed. Ensure any selected model supports text input, text output, and tool calling. + +## Getting Help + +For issues or suggestions with Lighthouse AI on Prowler Cloud, request support at [support.prowler.com](https://support.prowler.com) or [reach out through our Slack channel](https://goto.prowler.com/slack). diff --git a/prowler/changelog.d/11572.added.md b/prowler/changelog.d/11572.added.md new file mode 100644 index 0000000000..4838752200 --- /dev/null +++ b/prowler/changelog.d/11572.added.md @@ -0,0 +1 @@ +Changelog fragment workflow for SDK, API, UI, and MCP Server releases, including PR attribution, fragment validation, release compilation, and preserved section ordering