Toni de la Fuente
4b4175c495
feat(supabase): add project, auth, storage and database checks
...
- Read project SSL, network, Data API, backup and API key settings
- Evaluate Supabase Auth hardening from the project auth config
- Report public Storage buckets
- Surface Postgres posture from the Supabase security advisor
- Add project filtering, region-aware findings and configurable thresholds
2026-10-23 11:03:31 -07:00
Pedro Martín and Rubén De la Torre Vico
669df91ac9
feat(checks): PHP runtime coverage after the October security release ( #13127 )
...
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com >
2026-10-23 12:49:36 +02:00
Rubén De la Torre Vico
69b80f6a3f
chore(azure): raise App Service PHP latest version default to 8.5 ( #13128 )
2026-10-22 15:33:06 +02:00
Pedro Martín
3860cd3dce
feat(compliance): FedRAMP 20x Class C FRR + AWS checks ( #12808 )
2026-09-14 16:35:05 +02:00
Jonathan Nguyen
e9121f5f1a
feat(cloudwatch): add agentcore log group data protection policy check ( #12662 )
2026-09-01 17:04:16 +02:00
mintlify[bot]
73d5c6952b
docs: fix typos and grammar ( #12672 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-31 09:18:08 +02:00
mintlify[bot]
ad76b3026f
docs: brand tone and writing style fixes ( #12671 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-31 09:15:46 +02:00
mintlify[bot]
5202a68cf0
docs: brand tone and writing style fixes ( #12510 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-24 11:17:37 +02:00
mintlify[bot]
d3ced63397
fix(docs): typos and grammar ( #12468 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-17 09:21:56 +02:00
mintlify[bot]
561a1390be
docs: fix typos and grammar ( #12404 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-10 09:22:41 +02:00
mintlify[bot]
137b388df9
docs: fix typos and grammar ( #12278 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-03 09:35:37 +02:00
mintlify[bot]
e0cb18bdbd
docs: brand tone and writing style fixes ( #12277 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-03 09:16:47 +02:00
Nithin Reddy and Daniel Barranquero
339930ef13
feat(ec2): add ec2_instance_stopped_older_than_specific_days check ( #12076 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-27 09:13:18 +02:00
mintlify[bot]
4da5aed519
fix(docs): typos and grammar ( #12053 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-07-20 13:19:53 +01:00
Hugo Pereira Brito
8e9af708f8
feat(aws): add elbv2_listener_pqc_tls_enabled security check ( #11254 )
2026-07-15 12:45:23 +01:00
Pepe Fagoaga
cc6c731af6
docs: new product family ( #11984 )
2026-07-15 12:28:50 +02:00
mintlify[bot]
b2532ebfe5
docs(style): standardize "click" interaction verb ( #11893 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-07-08 14:39:29 +02:00
Pedro Martín
e6bbcb8043
chore(scan-config): improve wording and docs ( #11859 )
2026-07-07 11:14:19 +02:00
Chirag Trivedi and Daniel Barranquero
3f8c1e822f
feat(apigateway): add check for secrets in REST API stage variables ( #11188 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 14:24:18 +02:00
Hugo Pereira Brito
c46cbaaa4a
feat(sdk): limit selected high-volume AWS resource analysis ( #11228 )
2026-06-30 15:49:12 +01:00
Daniel Barranquero
5dac8a0a53
feat(sdk): replace detect-secrets library with kingfisher ( #11694 )
2026-06-30 15:36:23 +02:00
Pedro Martín and Pepe Fagoaga
0610866b73
feat(config): add SDK config's validator ( #11518 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-23 09:40:32 +02:00
Pedro Martín and Hugo P.Brito
04e6e330a7
feat(aws): add rolesanywhere service and pqc trust anchor check ( #11319 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 18:39:16 +01:00
Pedro Martín and Hugo P.Brito
bdd44a0dce
feat(aws): add acmpca service and pqc key algorithm check ( #11318 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 17:13:17 +01:00
Pedro Martín and Hugo P.Brito
10d9fc35e6
feat(aws): add cloudfront_distributions_pqc_tls_enabled check ( #11317 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 16:44:51 +01:00
Pedro Martín and Hugo P.Brito
ca48fd0719
feat(aws): add apigateway_domain_name_pqc_tls_enabled check ( #11316 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 16:12:01 +01:00
Pedro Martín and Hugo P.Brito
45cfe4e411
feat(aws): add transfer_server_pqc_ssh_kex_enabled check ( #11315 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 14:30:15 +01:00
Daniel Barranquero
2678c6bc9f
feat(okta): add application service with 6 new checks ( #11358 )
2026-05-27 11:16:18 +02:00
Hugo Pereira Brito and Daniel Barranquero
4c59af93eb
fix(azure): require all SMB channel encryption algorithms to be secure (storage_smb_channel_encryption_with_secure_algorithm) ( #11327 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-25 18:28:21 +02:00
Hugo Pereira Brito
68ffb2b219
docs(sdk): update Scanning Unused Services tutorial ( #11151 )
2026-05-14 08:26:29 +01:00
Hugo Pereira Brito
739be07077
chore(aws): skip unattached IAM policies unless --scan-unused-services ( #11150 )
2026-05-14 08:10:20 +01:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Hugo Pereira Brito and Pedro Martín
adbfc0bcd1
docs(compliance): expand developer guide for new compliance frameworks ( #10870 )
...
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2026-05-12 09:04:35 +01:00
Hugo Pereira Brito and Hugo P.Brito
0b26c1a39c
feat(aws): add iam_user_access_not_stale_to_sagemaker security check ( #11000 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-11 16:34:18 +02:00
Rubén De la Torre Vico
02f43a7ad6
docs: add Prowler Studio page and remove check-kreator pages ( #10981 )
2026-05-04 17:51:02 +02:00
Andoni Alonso and Pepe Fagoaga
43bd1083e0
feat(sdk): add SARIF output format for IaC provider ( #10626 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-04-22 09:32:20 +02:00
Andoni Alonso
9290d7e105
feat(sdk): warn when sensitive CLI flags receive explicit values ( #10532 )
2026-04-08 13:15:05 +02:00
4f86667433
feat(sdk): add Vercel provider with 30 security checks ( #10189 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-31 16:21:22 +02:00
Eran Cohen and Daniel Barranquero
0b461233c1
feat(iam): Add trusted IP configurable option to reduce false positives in 'opensearch' check ( #8631 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-10 12:12:54 +01:00
Pepe Fagoaga
5a062b19dc
chore: remove SaaS reference in dashboard ( #10288 )
2026-03-09 13:14:19 +01:00
mohd4adil and Daniel Barranquero
e97e31c7ca
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb ( #9692 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-29 09:13:34 +01:00
62a8540169
feat(gcp): add check to detect Compute Engine configuration changes ( #9698 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-01-12 12:22:15 +01:00
6c01151d78
docs(lighthouse): update lighthouse architecture docs ( #9576 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-12 10:18:58 +01:00
Pedro Martín
cab9b008d1
docs(alibabacloud): provider documentation ( #9721 )
2026-01-07 11:45:57 +01:00
Ryan Nolette and pedrooot
47532cf498
feat: add category filter to all Prowler dashboards ( #9137 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2025-12-24 11:23:10 +01:00
lydiavilchez and Daniel Barranquero
43875b6ae7
feat(gcp): add check to ensure Managed Instance Groups span multiple zones ( #9566 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-22 15:12:08 +01:00
Marc Espin and Andoni A.
4167de39d2
fix(docs): Fix dead links leading to docs.prowler.cloud ( #9240 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2025-11-17 09:56:51 +01:00
Hugo Pereira Brito
866edfb167
chore(outputs): raise an error when using -M asff for a provider other than aws ( #9225 )
2025-11-13 16:53:22 +01:00
Sergio Garcia
7c339ed9e4
docs(mutelist): fix misleading docstrings about tag and exception logic ( #9205 )
2025-11-10 13:39:24 -05:00
Andoni Alonso
c08c27e5c6
docs: migrate to Mintlify ( #8894 )
2025-10-15 16:38:56 +02:00
Toni de la Fuente