César Arroba
b9ac1446d4
docs(security): document the US region
...
Adds the US region to the data regions table and its egress IP to the
networking page, so customers can reach cloud.us.prowler.com and allowlist
the region they are hosted in.
2026-07-28 17:23:08 +02:00
Rubén De la Torre Vico
8eeb37aea4
feat(mcp): add users and roles tools to the Prowler MCP Server ( #12088 )
2026-07-28 17:16:56 +02:00
Pepe Fagoaga
7ba96ab2e2
docs: update images ( #12159 )
2026-07-28 16:47:38 +02:00
Stefano Baldo and Hugo P.Brito
4987d8a08e
fix(gcp): make gen2 Cloud Functions IAM policy query thread-safe ( #12107 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 15:40:19 +01:00
Pepe Fagoaga
2bd89ceb97
docs: update images ( #12146 )
2026-07-28 14:56:22 +02:00
Pedro Martín and alejandrobailo
0d4a21b5a4
feat(ui): add cross-account compliance view ( #12086 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-07-28 14:03:58 +02:00
Alejandro Bailo
1460f7b188
feat(ui): add Lighthouse contextual transport core ( #12068 )
2026-07-28 12:12:19 +02:00
Daniel Barranquero
e9bbde2f01
fix(api): remove cartesian product in Attack Paths IAM privesc queries ( #12136 )
2026-07-28 11:12:10 +02:00
Oleksandr_Sanin and Hugo P.Brito
76239b7076
feat(ocsf): populate analytic and attacks fields in OCSF detection finding output ( #11492 )
...
Signed-off-by: Oleksandr Sanin <alexaaander.sanin@gmail.com >
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-28 08:19:23 +01:00
César Arroba
0c0f150cd4
chore(ui): drop the unused deployment-mode variable ( #12131 )
2026-07-27 18:44:00 +02:00
rayair250-droid and Hugo P.Brito
43de7709cb
fix(gcp): detect SSH/RDP exposure when the port is not first in a multi-port firewall rule ( #12115 )
...
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com >
2026-07-27 16:44:35 +01:00
Pepe Fagoaga
bb18dcb882
docs(readme): agentic cloud defender and link to Prowler Cloud ( #12135 )
2026-07-27 17:21:17 +02:00
f5fe9c7b40
ci(helm): publish immutable chart versions on release ( #12056 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-07-27 16:58:59 +02:00
Hugo Pereira Brito
60c81f6549
docs: document Jira dispatch for Finding Groups ( #12130 )
2026-07-27 15:56:54 +01:00
Alan Buscaglia
f18c2841a8
fix(ui): classify attack path findings exactly ( #11244 )
2026-07-27 14:48:01 +02:00
Bruno Ferreira and Cursor
6b21e31a28
fix(app): cap Celery worker concurrency in the Helm chart ( #12054 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-27 12:53:03 +02:00
Pepe Fagoaga
294e665d9e
docs: changelog section ( #12126 )
2026-07-27 12:44:56 +02:00
mintlify[bot]
94e14660da
docs: apply brand tone and writing style fixes ( #12125 )
...
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
2026-07-27 09:25:28 +02:00
Nithin Reddy and Daniel Barranquero
339930ef13
feat(ec2): add ec2_instance_stopped_older_than_specific_days check ( #12076 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-27 09:13:18 +02:00
d933a8ecab
feat(providers): add Huawei Cloud provider with CIS 1.0 benchmark ( #11950 )
...
Co-authored-by: tomitobio <tomitobio@users.noreply.github.com >
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com >
2026-07-27 08:52:58 +02:00
Prowler Bot and prowler-bot
da09ad9813
chore(release): Bump versions to v5.37.0 ( #12113 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-24 14:56:54 +02:00
Prowler Bot and prowler-bot
2298d4a3f8
chore(changelog): v5.36.0 ( #12109 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-24 12:22:40 +02:00
Alejandro Bailo
066d53467a
fix(ui): bump next-auth to 5.0.0-beta.32 to patch critical advisories ( #12108 )
2026-07-24 10:46:56 +02:00
Pedro Martín
cf433128ed
fix(api): duplicate finding rows in outputs on tasks re-run ( #12097 )
2026-07-24 10:18:18 +02:00
Hugo Pereira Brito and Pablo F.G
0b782fcb8c
fix(kubernetes): block kubeconfig command auth bypass ( #12091 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-24 08:40:23 +01:00
StylusFrost
b80e3a7bfb
docs(msp): add Prowler for MSPs and MSSPs documentation ( #12101 )
2026-07-23 16:20:25 +02:00
Daniel Barranquero
885555e080
fix(ui): enable grouped Jira dispatch for Cloud users ( #12100 )
2026-07-23 14:30:27 +01:00
Alan Buscaglia
641c418816
fix(ui): refresh permissions after tenant switch ( #12087 )
2026-07-23 13:26:54 +02:00
Rubén De la Torre Vico
10d173f8da
docs: update Image provider interface to include UI ( #12098 )
2026-07-23 12:50:53 +02:00
Prowler Bot and prowler-bot
34de660755
feat(aws): Update regions for AWS services ( #11716 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
2026-07-23 12:33:13 +02:00
Daniel Barranquero
fb75146e34
feat(ui): filter empty Attack Paths queries from the selector in Cloud ( #12010 )
2026-07-23 10:36:33 +02:00
Pablo Fernandez Guerra (PFE) and Pablo F.G
9f5ef80e69
test(ui): await recent-chats render in lighthouse panel chat test ( #12096 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
2026-07-23 09:51:34 +02:00
Alejandro Bailo
2f6aedf291
fix(ui): update Next.js to 16.2.11 ( #12093 )
2026-07-23 09:42:53 +02:00
Alejandro Bailo
dcf2736e8d
refactor(ui): centralize Jira dispatch flow ( #12092 )
2026-07-22 20:23:13 +02:00
7f0dc9b7da
feat(ui): add AI agents banner to overview ( #12074 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
2026-07-22 16:00:52 +02:00
Hugo Pereira Brito and alejandrobailo
ff45f46047
feat(ui): add Jira dispatch choices for finding selections ( #12001 )
...
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com >
2026-07-22 12:58:12 +01:00
Hugo Pereira Brito
3bd13d173d
fix(api): recover missing scan resources ( #12002 )
2026-07-22 12:24:45 +01:00
César Arroba
2b7f7e7dc0
fix(api): invoke m365 module without a hardcoded python version path ( #12085 )
2026-07-22 12:19:13 +02:00
César Arroba
98015dafef
ci(api): scan the SDK pin that ships, not the committed lock ( #12084 )
2026-07-22 12:08:40 +02:00
Pedro Martín
d70a7e3d02
fix(api): scope integrations to role provider visibility ( #12060 )
2026-07-22 11:50:04 +02:00
7d2a22c45a
feat(ui): make the Cloud flag a runtime variable (UI_CLOUD_ENABLED) ( #12061 )
...
Co-authored-by: Pablo F.G <pablo.fernandez@prowler.com >
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com >
2026-07-22 11:31:22 +02:00
Alan Buscaglia
bf82e9ff3d
fix(ui): prevent cloud upgrade modal flash on close ( #12067 )
2026-07-22 11:30:58 +02:00
Pedro Martín
eece938350
fix(ci): ignore unfixed Perl Storable CVE-2026-57433 ( #12081 )
2026-07-22 10:32:00 +02:00
Rubén De la Torre Vico
2b0e34818c
docs: add per-agent MCP configuration guides ( #12064 )
2026-07-22 10:23:42 +02:00
César Arroba
f587dbf419
fix(ui): bump vitest to 4.1.10 to resolve @vitest/browser file-access bypass ( #12077 )
2026-07-22 09:56:49 +02:00
Hugo Pereira Brito
2d684c1996
fix(ui): adjust sidebar logo top spacing ( #12066 )
2026-07-21 15:54:41 +01:00
Pedro Martín
7f9d64a996
fix(ui): show AWS Organizations deployment hint in error color ( #12063 )
2026-07-21 16:50:48 +02:00
César Arroba
e943ded978
fix(ui): remove unused npm from container to drop tar CVE-2026-59873 ( #12065 )
2026-07-21 15:32:32 +02:00
Alan Buscaglia
bb20f69a63
fix(ui): prevent findings timeline axis overflow ( #11545 )
2026-07-21 11:22:19 +02:00
kiranrajsg and Daniel Barranquero
97233189c3
feat(sagemaker): add sagemaker_notebook_instance_no_secrets check ( #11843 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-07-21 10:44:41 +02:00
César Arroba