Toni de la Fuente
4b4175c495
feat(supabase): add project, auth, storage and database checks
...
- Read project SSL, network, Data API, backup and API key settings
- Evaluate Supabase Auth hardening from the project auth config
- Report public Storage buckets
- Surface Postgres posture from the Supabase security advisor
- Add project filtering, region-aware findings and configurable thresholds
2026-10-23 11:03:31 -07:00
Pedro Martín and Rubén De la Torre Vico
669df91ac9
feat(checks): PHP runtime coverage after the October security release ( #13127 )
...
Co-authored-by: Rubén De la Torre Vico <98956809+puchy22@users.noreply.github.com >
2026-10-23 12:49:36 +02:00
Rubén De la Torre Vico
69b80f6a3f
chore(azure): raise App Service PHP latest version default to 8.5 ( #13128 )
2026-10-22 15:33:06 +02:00
Pedro Martín
3860cd3dce
feat(compliance): FedRAMP 20x Class C FRR + AWS checks ( #12808 )
2026-09-14 16:35:05 +02:00
Jonathan Nguyen
e9121f5f1a
feat(cloudwatch): add agentcore log group data protection policy check ( #12662 )
2026-09-01 17:04:16 +02:00
mintlify[bot]
d3ced63397
fix(docs): typos and grammar ( #12468 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-08-17 09:21:56 +02:00
Nithin Reddy and Daniel Barranquero
339930ef13
feat(ec2): add ec2_instance_stopped_older_than_specific_days check ( #12076 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-27 09:13:18 +02:00
Hugo Pereira Brito
8e9af708f8
feat(aws): add elbv2_listener_pqc_tls_enabled security check ( #11254 )
2026-07-15 12:45:23 +01:00
Pedro Martín
e6bbcb8043
chore(scan-config): improve wording and docs ( #11859 )
2026-07-07 11:14:19 +02:00
Chirag Trivedi and Daniel Barranquero
3f8c1e822f
feat(apigateway): add check for secrets in REST API stage variables ( #11188 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-01 14:24:18 +02:00
Hugo Pereira Brito
c46cbaaa4a
feat(sdk): limit selected high-volume AWS resource analysis ( #11228 )
2026-06-30 15:49:12 +01:00
Daniel Barranquero
5dac8a0a53
feat(sdk): replace detect-secrets library with kingfisher ( #11694 )
2026-06-30 15:36:23 +02:00
Pedro Martín and Pepe Fagoaga
0610866b73
feat(config): add SDK config's validator ( #11518 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-06-23 09:40:32 +02:00
Pedro Martín and Hugo P.Brito
04e6e330a7
feat(aws): add rolesanywhere service and pqc trust anchor check ( #11319 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 18:39:16 +01:00
Pedro Martín and Hugo P.Brito
bdd44a0dce
feat(aws): add acmpca service and pqc key algorithm check ( #11318 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 17:13:17 +01:00
Pedro Martín and Hugo P.Brito
10d9fc35e6
feat(aws): add cloudfront_distributions_pqc_tls_enabled check ( #11317 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 16:44:51 +01:00
Pedro Martín and Hugo P.Brito
ca48fd0719
feat(aws): add apigateway_domain_name_pqc_tls_enabled check ( #11316 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 16:12:01 +01:00
Pedro Martín and Hugo P.Brito
45cfe4e411
feat(aws): add transfer_server_pqc_ssh_kex_enabled check ( #11315 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-06-22 14:30:15 +01:00
Daniel Barranquero
2678c6bc9f
feat(okta): add application service with 6 new checks ( #11358 )
2026-05-27 11:16:18 +02:00
Hugo Pereira Brito and Daniel Barranquero
4c59af93eb
fix(azure): require all SMB channel encryption algorithms to be secure (storage_smb_channel_encryption_with_secure_algorithm) ( #11327 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-05-25 18:28:21 +02:00
Daniel Barranquero
4dd5baadf6
feat(okta): add provider to the SDK with 1 security check ( #11079 )
2026-05-13 15:57:57 +02:00
Hugo Pereira Brito and Hugo P.Brito
0b26c1a39c
feat(aws): add iam_user_access_not_stale_to_sagemaker security check ( #11000 )
...
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home >
2026-05-11 16:34:18 +02:00
4f86667433
feat(sdk): add Vercel provider with 30 security checks ( #10189 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-03-31 16:21:22 +02:00
Eran Cohen and Daniel Barranquero
0b461233c1
feat(iam): Add trusted IP configurable option to reduce false positives in 'opensearch' check ( #8631 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-03-10 12:12:54 +01:00
mohd4adil and Daniel Barranquero
e97e31c7ca
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb ( #9692 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-29 09:13:34 +01:00
62a8540169
feat(gcp): add check to detect Compute Engine configuration changes ( #9698 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-01-12 12:22:15 +01:00
lydiavilchez and Daniel Barranquero
43875b6ae7
feat(gcp): add check to ensure Managed Instance Groups span multiple zones ( #9566 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-22 15:12:08 +01:00
Marc Espin and Andoni A.
4167de39d2
fix(docs): Fix dead links leading to docs.prowler.cloud ( #9240 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2025-11-17 09:56:51 +01:00
Andoni Alonso
c08c27e5c6
docs: migrate to Mintlify ( #8894 )
2025-10-15 16:38:56 +02:00
Toni de la Fuente