 Hugo Pereira BritoandAndoni Alonso
|
80c94faff9
|
feat(cloudflare): --account-id filter support (#9894)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2026-01-27 14:18:55 +01:00 |
|
 Hugo Pereira BritoandAndoni Alonso
|
6bb8dc6168
|
feat(cloudflare): extend dns and zone services check coverage (#9426)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2026-01-27 13:48:26 +01:00 |
|
 
|
9e7ecb39fa
|
feat(aws): CloudTrail timeline for findings (#9101)
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-01-27 13:00:46 +01:00 |
|
 
|
3d6aa6c650
|
feat(m365): add defender_zap_for_teams_enabled security check (#9838)
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-01-26 17:34:10 +01:00 |
|
Andoni Alonso
|
7f4c02c738
|
feat(m365): add exchange_shared_mailbox_sign_in_disabled check (#9828)
|
2026-01-26 16:00:28 +01:00 |
|
Hugo Pereira Brito
|
5784592437
|
chore(azure): add vault parallelization in keyvault service (#9876)
|
2026-01-26 13:39:54 +01:00 |
|
 Andoni AlonsoandHugoPBrito
|
6cb0edf3e1
|
feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability (#9840)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-01-22 15:12:24 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
963ece9a0b
|
feat(gcp): add check to detect persistent disks on suspended VM instances (#9747)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-01-22 13:38:30 +01:00 |
|
lydiavilchez
|
e76ecfdd4d
|
feat(gcp): add check for OS Login 2FA enabled at project level (#9839)
|
2026-01-21 15:12:01 +01:00 |
|
lydiavilchez
|
7b839d9f9e
|
feat(gcp): add check to enforce On Host Maintenance set to MIGRATE (#9834)
|
2026-01-21 09:37:21 +01:00 |
|
 Hugo Pereira BritoandAndoni Alonso
|
aa24034ca7
|
feat(cloudflare): Add bot protection and configuration checks for zones (#9425)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2026-01-16 12:06:52 +01:00 |
|
 Josema CamachoandAndoni A.
|
847645543a
|
feat(attack-paths): update boto dependencies for catrography compatibility (#9798)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
|
2026-01-15 13:00:54 +01:00 |
|
 Hugo Pereira BritoandAndoni Alonso
|
d4bc6d7531
|
feat(cloudflare): Add TLS/SSL, records and email security checks for zones (#9424)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2026-01-15 09:31:27 +01:00 |
|
Hugo Pereira Brito
|
1bf49747ad
|
chore(entra): enhance performance for user_registration_details and user mfa evaluation (#9236)
|
2026-01-14 14:01:51 +01:00 |
|
lydiavilchez
|
2cde4c939d
|
feat(gcp): add compute_snapshot_not_outdated check (#9774)
|
2026-01-14 12:35:29 +01:00 |
|
Hugo Pereira Brito
|
9844379d30
|
chore(cloudflare): rename zones service to zone (#9792)
|
2026-01-14 11:00:51 +01:00 |
|
Hugo Pereira Brito
|
b0eea61468
|
feat(cloudflare): Add Cloudflare provider with zones service and critical security checks (#9423)
|
2026-01-13 11:09:54 +01:00 |
|
  
|
429c591819
|
chore(aws): fixup AWS EC2 SG lib (#9216)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2026-01-12 13:47:37 +01:00 |
|
 
|
62a8540169
|
feat(gcp): add check to detect Compute Engine configuration changes (#9698)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2026-01-12 12:22:15 +01:00 |
|
 mchennaiandPepe Fagoaga
|
05466cff22
|
test: Add edge case test for s3_bucket_server_access_logging_enabled (#9725)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-01-12 10:06:34 +01:00 |
|
Andoni Alonso
|
27492cbd42
|
fix(oci): validate credentials before scanning (#9738)
|
2026-01-08 15:47:26 +01:00 |
|
lydiavilchez
|
3e4458c8f3
|
feat(gcp): add check to detect VMs with multiple network interfaces (#9702)
|
2026-01-07 17:04:53 +01:00 |
|
lydiavilchez
|
e12e0dc1aa
|
feat(gcp): add check to ensure Compute Engine disk images are not publicly shared (#9718)
|
2026-01-07 15:05:36 +01:00 |
|
 mchennaiandpedrooot
|
4169611a6a
|
test(s3_bucket_server_access_logging_enabled): Add multi-bucket test (#9716)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2026-01-05 11:34:57 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
78ce4d8d9b
|
feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled (#9690)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-30 12:40:47 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
144d59de45
|
feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers (#9695)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-29 14:16:11 +01:00 |
|
 Pedro MartínandPepe Fagoaga
|
8d1d041092
|
chore(aws): support new eusc partition (#9649)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-12-23 12:28:10 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
ad5095595c
|
feat(gcp): add compute check to ensure VM disks have auto-delete disabled (#9604)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-23 10:57:11 +01:00 |
|
 Ryan NoletteandPepe Fagoaga
|
81e046ecf6
|
feat(bedrock): API pagination (#9606)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-12-23 09:06:19 +01:00 |
|
 Ryan NoletteandPepe Fagoaga
|
0d363e6100
|
feat(sagemaker): parallelize tag listing for better performance (#9609)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-12-23 08:51:16 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
43875b6ae7
|
feat(gcp): add check to ensure Managed Instance Groups span multiple zones (#9566)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-12-22 15:12:08 +01:00 |
|
 
|
57b9a2ea10
|
feat(aws): Update regions for AWS services (#9631)
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
|
2025-12-22 13:31:58 +01:00 |
|
Pedro Martín
|
3eb2595f6d
|
feat(api): support alibabacloud provider (#9485)
|
2025-12-22 12:46:50 +01:00 |
|
lydiavilchez
|
c83374d4ed
|
fix(gcp): store Cloud Storage bucket regions as lowercase (#9567)
|
2025-12-16 17:34:01 +01:00 |
|
 Daniel BarranqueroandAndoni Alonso
|
d4b90abd10
|
chore(mongodbatlas): store location as lowercase (#9554)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2025-12-16 10:40:49 +01:00 |
|
lydiavilchez
|
bfce602859
|
fix(gcp-cloudstorage): handle VPC-blocked API calls as PASS (#9478)
|
2025-12-10 10:40:52 +01:00 |
|
 
|
dbdce98cf2
|
feat(alibaba): add Alibaba Cloud provider (#9329)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2025-12-03 11:47:55 -05:00 |
|
lydiavilchez
|
3dadb264cc
|
feat(gcp): add check for VM instance deletion protection (#9358)
|
2025-12-01 13:20:32 +01:00 |
|
 lydiavilchezandHugoPBrito
|
b2abdbeb60
|
feat(gcp-compute): add check to ensure VMs are not preemptible or spot (#9342)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2025-11-28 12:49:19 +01:00 |
|
lydiavilchez
|
dc852b4595
|
feat(gcp-compute): add automatic restart check for VM instances (#9271)
|
2025-11-28 12:21:58 +01:00 |
|
 mattkeelerandHugoPBrito
|
dc9e91ac4e
|
fix(m365): Support multiple Exchange mailbox policies (#9241)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2025-11-27 14:10:15 +01:00 |
|
 Shafkat RahmanandAndoni Alonso
|
59f8dfe5ae
|
feat(github): add immutable releases check (#9162)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
|
2025-11-27 13:40:15 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
9d7b9c3327
|
feat(gcp): Add VPC Service Controls check for Cloud Storage (#9256)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-11-26 14:45:27 +01:00 |
|
Hugo Pereira Brito
|
880345bebe
|
fix(sharepoint): false positives on disabled external sharing (#9298)
|
2025-11-26 12:23:04 +01:00 |
|
Andoni Alonso
|
2198e461c9
|
feat(iac): use branch as region for IaC findings (#9295)
|
2025-11-24 17:00:06 +01:00 |
|
 lydiavilchezandDaniel Barranquero
|
0ba1226d88
|
feat(gcp): implement Cloud Storage Data Access Audit Logs check (#9220)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2025-11-18 12:08:54 +01:00 |
|
 Marc EspinandAndoni A.
|
4167de39d2
|
fix(docs): Fix dead links leading to docs.prowler.cloud (#9240)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
|
2025-11-17 09:56:51 +01:00 |
|
  
|
531ba5c31b
|
feat(azure): new check for Entra ID authentication for Azure PostgreSQL Flexible Server (#8764)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
|
2025-11-14 13:54:57 +01:00 |
|
Daniel Barranquero
|
d1380fc19d
|
fix(azure): validation and other errors in cosmosdb, defender, storage and vm (#8915)
|
2025-11-13 09:17:44 -05:00 |
|
Lee Trout
|
c5c7b84afd
|
chore(ec2): prevent test from calling live AWS endpoint (#9228)
|
2025-11-13 10:12:19 +01:00 |
|