Merge branch 'v5.13' into backport/v5.13/pr-9208

fix: split file_name not working on Windows (#9269 )
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
2026-08-21 13:20:57 +00:00 · 2025-11-19 14:29:11 +01:00 · 2025-11-18 14:49:49 +01:00 · 2025-11-17 12:29:49 +01:00 · 2025-11-13 09:29:17 -05:00 · 2025-11-12 08:12:30 +00:00
556 changed files with 5166 additions and 70911 deletions
@@ -10,24 +10,13 @@ NEXT_PUBLIC_API_BASE_URL=${API_BASE_URL}
 NEXT_PUBLIC_API_DOCS_URL=http://prowler-api:8080/api/v1/docs
 AUTH_TRUST_HOST=true
 UI_PORT=3000
+# Temp URL for feeds need to use actual
+RSS_FEED_URL=https://prowler.com/blog/rss
 # openssl rand -base64 32
 AUTH_SECRET="N/c6mnaS5+SWq81+819OrzQZlmx1Vxtp/orjttJSmw8="
 # Google Tag Manager ID
 NEXT_PUBLIC_GOOGLE_TAG_MANAGER_ID=""
-# Sentry
-SENTRY_DSN=
-NEXT_PUBLIC_SENTRY_DSN=
-SENTRY_ORG=
-SENTRY_PROJECT=
-SENTRY_AUTH_TOKEN=
-SENTRY_ENVIRONMENT=production
-NEXT_PUBLIC_SENTRY_ENVIRONMENT=production

-#### Code Review Configuration ####
-# Enable Claude Code standards validation on pre-push hook
-# Set to 'true' to validate changes against AGENTS.md standards via Claude Code
-# Set to 'false' to skip validation
-CODE_REVIEW_ENABLED=true

 #### Prowler API Configuration ####
 PROWLER_API_VERSION="stable"
@@ -137,13 +126,3 @@ LANGSMITH_TRACING=false
 LANGSMITH_ENDPOINT="https://api.smith.langchain.com"
 LANGSMITH_API_KEY=""
 LANGCHAIN_PROJECT=""
-
-# RSS Feed Configuration
-# Multiple feed sources can be configured as a JSON array (must be valid JSON, no trailing commas)
-# Each source requires: id, name, type (github_releases|blog|custom), url, and enabled flag
-# IMPORTANT: Must be a single line with valid JSON (no newlines, no trailing commas)
-# Example with one source:
-RSS_FEED_SOURCES='[{"id":"prowler-releases","name":"Prowler Releases","type":"github_releases","url":"https://github.com/prowler-cloud/prowler/releases.atom","enabled":true}]'
-# Example with multiple sources (no trailing comma after last item):
-# RSS_FEED_SOURCES='[{"id":"prowler-releases","name":"Prowler Releases","type":"github_releases","url":"https://github.com/prowler-cloud/prowler/releases.atom","enabled":true},{"id":"prowler-blog","name":"Prowler Blog","type":"blog","url":"https://prowler.com/blog/rss","enabled":false}]'
-
@@ -22,13 +22,6 @@ Please add a detailed description of how to review this PR.
 - [ ] Review if is needed to change the [Readme.md](https://github.com/prowler-cloud/prowler/blob/master/README.md)
 - [ ] Ensure new entries are added to [CHANGELOG.md](https://github.com/prowler-cloud/prowler/blob/master/prowler/CHANGELOG.md), if applicable.

-#### UI
- [ ] All issue/task requirements work as expected on the UI
- [ ] Screenshots/Video of the functionality flow (if applicable) - Mobile (X < 640px)
- [ ] Screenshots/Video of the functionality flow (if applicable) - Table (640px > X < 1024px)
- [ ] Screenshots/Video of the functionality flow (if applicable) - Desktop (X > 1024px)
- [ ] Ensure new entries are added to [CHANGELOG.md](https://github.com/prowler-cloud/prowler/blob/master/ui/CHANGELOG.md), if applicable.
-
 #### API
 - [ ] Verify if API specs need to be regenerated.
 - [ ] Check if version updates are required (e.g., specs, Poetry, etc.).
@@ -45,12 +45,12 @@ jobs:
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Initialize CodeQL
-        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
        with:
          languages: ${{ matrix.language }}
          config-file: ./.github/codeql/api-codeql-config.yml

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
        with:
          category: '/language:${{ matrix.language }}'
@@ -38,7 +38,7 @@ jobs:

      - name: Backport PR
        if: steps.label_check.outputs.label_check == 'success'
-        uses: sorenlouv/backport-github-action@516854e7c9f962b9939085c9a92ea28411d1ae90 # v10.2.0
+        uses: sorenlouv/backport-github-action@ad888e978060bc1b2798690dd9d03c4036560947 # v9.5.1
        with:
          github_token: ${{ secrets.PROWLER_BOT_ACCESS_TOKEN }}
          auto_backport_label_prefix: ${{ env.BACKPORT_LABEL_PREFIX }}
@@ -26,6 +26,6 @@ jobs:

    steps:
      - name: Check PR title format
-        uses: agenthunt/conventional-commit-checker-action@f1823f632e95a64547566dcd2c7da920e67117ad # v2.0.1
+        uses: agenthunt/conventional-commit-checker-action@9e552d650d0e205553ec7792d447929fc78e012b # v2.0.0
        with:
          pr-title-regex: '^(feat|fix|docs|style|refactor|perf|test|chore|build|ci|revert)(\([^)]+\))?!?: .+'
@@ -28,6 +28,6 @@ jobs:
          fetch-depth: 0

      - name: Scan for secrets with TruffleHog
-        uses: trufflesecurity/trufflehog@b84c3d14d189e16da175e2c27fa8136603783ffc # v3.90.12
+        uses: trufflesecurity/trufflehog@ad6fc8fb446b8fafbf7ea8193d2d6bfd42f45690 # v3.90.11
        with:
          extra_args: '--results=verified,unknown'
@@ -0,0 +1,45 @@
+name: Community PR labelling
+
+on:
+  # We need "write" permissions on the PR to be able to add a label.
+  pull_request_target: # We need this to have labelling permissions. There are no user inputs here, so we should be fine.
+    types:
+      - opened
+
+permissions: {}
+
+jobs:
+  label-if-community:
+    name: Add 'community' label if the PR is from a community contributor
+    if: github.repository == 'prowler-cloud/prowler'
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+
+    steps:
+      - name: Check if author is org member
+        id: check_membership
+        env:
+          GH_TOKEN: ${{ github.token }}
+          AUTHOR: ${{ github.event.pull_request.user.login }}
+          ORG: ${{ github.repository_owner }}
+        run: |
+          echo "Checking if $AUTHOR is a member of $ORG"
+          if gh api --method GET "orgs/$ORG/members/$AUTHOR" >/dev/null 2>&1; then
+            echo "is_member=true" >> $GITHUB_OUTPUT
+            echo "$AUTHOR is an organization member"
+          else
+            echo "is_member=false" >> $GITHUB_OUTPUT
+            echo "$AUTHOR is not an organization member"
+          fi
+
+      - name: Add community label
+        if: steps.check_membership.outputs.is_member == 'false'
+        env:
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          echo "Adding 'community' label to PR #$PR_NUMBER"
+          gh api /repos/${{ github.repository }}/issues/${{ github.event.number }}/labels \
+            -X POST \
+            -f labels[]='community'
@@ -27,66 +27,3 @@ jobs:
        uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
        with:
          sync-labels: true
-
-  label-community:
-    name: Add 'community' label if the PR is from a community contributor
-    needs: labeler
-    if: github.repository == 'prowler-cloud/prowler' && github.event.action == 'opened'
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-
-    steps:
-      - name: Check if author is org member
-        id: check_membership
-        env:
-          AUTHOR: ${{ github.event.pull_request.user.login }}
-        run: |
-          # Hardcoded list of prowler-cloud organization members
-          # This list includes members who have set their organization membership as private
-          ORG_MEMBERS=(
-            "AdriiiPRodri"
-            "Alan-TheGentleman"
-            "alejandrobailo"
-            "amitsharm"
-            "andoniaf"
-            "cesararroba"
-            "Chan9390"
-            "danibarranqueroo"
-            "HugoPBrito"
-            "jfagoagas"
-            "josemazo"
-            "lydiavilchez"
-            "mmuller88"
-            "MrCloudSec"
-            "pedrooot"
-            "prowler-bot"
-            "puchy22"
-            "rakan-pro"
-            "RosaRivasProwler"
-            "StylusFrost"
-            "toniblyx"
-            "vicferpoy"
-          )
-
-          echo "Checking if $AUTHOR is a member of prowler-cloud organization"
-
-          # Check if author is in the org members list
-          if printf '%s\n' "${ORG_MEMBERS[@]}" | grep -q "^${AUTHOR}$"; then
-            echo "is_member=true" >> $GITHUB_OUTPUT
-            echo "$AUTHOR is an organization member"
-          else
-            echo "is_member=false" >> $GITHUB_OUTPUT
-            echo "$AUTHOR is not an organization member"
-          fi
-
-      - name: Add community label
-        if: steps.check_membership.outputs.is_member == 'false'
-        env:
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          echo "Adding 'community' label to PR #$PR_NUMBER"
-          gh api /repos/${{ github.repository }}/issues/${{ github.event.number }}/labels \
-            -X POST \
-            -f labels[]='community'
@@ -83,7 +83,7 @@ jobs:

      - name: Update PR comment with changelog status
        if: github.event.pull_request.head.repo.full_name == github.repository
-        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
        with:
          issue-number: ${{ github.event.pull_request.number }}
          comment-id: ${{ steps.find-comment.outputs.comment-id }}
@@ -97,7 +97,7 @@ jobs:
          body-includes: '<!-- conflict-checker-comment -->'

      - name: Create or update comment
-        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
        with:
          comment-id: ${{ steps.find-comment.outputs.comment-id }}
          issue-number: ${{ github.event.pull_request.number }}
@@ -382,7 +382,7 @@ jobs:
          no-changelog

    - name: Create draft release
-      uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
+      uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
      with:
        tag_name: ${{ env.PROWLER_VERSION }}
        name: Prowler ${{ env.PROWLER_VERSION }}
@@ -52,12 +52,12 @@ jobs:
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Initialize CodeQL
-        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
        with:
          languages: ${{ matrix.language }}
          config-file: ./.github/codeql/sdk-codeql-config.yml

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
        with:
          category: '/language:${{ matrix.language }}'
@@ -39,7 +39,7 @@ jobs:
        run: pip install boto3

      - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8 # v5.1.0
+        uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v5.0.0
        with:
          aws-region: ${{ env.AWS_REGION }}
          role-to-assume: ${{ secrets.DEV_IAM_ROLE_ARN }}
@@ -48,12 +48,12 @@ jobs:
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Initialize CodeQL
-        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
        with:
          languages: ${{ matrix.language }}
          config-file: ./.github/codeql/ui-codeql-config.yml

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
        with:
          category: '/language:${{ matrix.language }}'
@@ -75,7 +75,7 @@ jobs:
            echo "All database fixtures loaded successfully!"
          '
      - name: Setup Node.js environment
-        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
        with:
          node-version: '20.x'
          cache: 'npm'
@@ -39,12 +39,6 @@ secrets-*/
 # JUnit Reports
 junit-reports/

-# Test and coverage artifacts
-*_coverage.xml
-pytest_*.xml
-.coverage
-htmlcov/
-
 # VSCode files
 .vscode/

@@ -70,6 +64,7 @@ htmlcov/
 ui/.env*
 api/.env*
 mcp_server/.env*
+.env.local

 # Coverage
 .coverage*
@@ -10,4 +10,4 @@
 Want some swag as appreciation for your contribution?

 # Prowler Developer Guide
-https://goto.prowler.com/devguide
+https://docs.prowler.com/projects/prowler-open-source/en/latest/developer-guide/introduction/
@@ -56,7 +56,7 @@ Prowler includes hundreds of built-in controls to ensure compliance with standar

 Prowler App is a web-based application that simplifies running Prowler across your cloud provider accounts. It provides a user-friendly interface to visualize the results and streamline your security assessments.

-![Prowler App](docs/images/products/overview.png)
+![Prowler App](docs/products/img/overview.png)

 >For more details, refer to the [Prowler App Documentation](https://docs.prowler.com/projects/prowler-open-source/en/latest/#prowler-app-installation)

@@ -73,26 +73,26 @@ prowler <provider>
 ```console
 prowler dashboard
 ```
-![Prowler Dashboard](docs/images/products/dashboard.png)
+![Prowler Dashboard](docs/products/img/dashboard.png)

 # Prowler at a Glance
 > [!Tip]
 > For the most accurate and up-to-date information about checks, services, frameworks, and categories, visit [**Prowler Hub**](https://hub.prowler.com).


-| Provider | Checks | Services | [Compliance Frameworks](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/compliance/) | [Categories](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/misc/#categories) | Support | Interface |
-|---|---|---|---|---|---|---|
-| AWS | 576 | 82 | 39 | 10 | Official | UI, API, CLI |
-| GCP | 79 | 13 | 13 | 3 | Official | UI, API, CLI |
-| Azure | 162 | 19 | 13 | 4 | Official | UI, API, CLI |
-| Kubernetes | 83 | 7 | 5 | 7 | Official | UI, API, CLI |
+| Provider | Checks | Services | [Compliance Frameworks](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/compliance/) | [Categories](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/misc/#categories) | Support | Stage | Interface |
+|---|---|---|---|---|---|---|---|
+| AWS | 576 | 82 | 38 | 10 | Official | Stable | UI, API, CLI |
+| GCP | 79 | 13 | 11 | 3 | Official | Stable | UI, API, CLI |
+| Azure | 162 | 19 | 12 | 4 | Official | Stable | UI, API, CLI |
+| Kubernetes | 83 | 7 | 5 | 7 | Official | Stable | UI, API, CLI |
 | GitHub | 17 | 2 | 1 | 0 | Official | Stable | UI, API, CLI |
-| M365 | 70 | 7 | 3 | 2 | Official | UI, API, CLI |
-| OCI | 51 | 13 | 1 | 10 | Official | UI, API, CLI |
-| IaC | [See `trivy` docs.](https://trivy.dev/latest/docs/coverage/iac/) | N/A | N/A | N/A | Official | UI, API, CLI |
-| MongoDB Atlas | 10 | 3 | 0 | 0 | Official | CLI, API |
-| LLM | [See `promptfoo` docs.](https://www.promptfoo.dev/docs/red-team/plugins/) | N/A | N/A | N/A | Official | CLI |
-| NHN | 6 | 2 | 1 | 0 | Unofficial | CLI |
+| M365 | 70 | 7 | 3 | 2 | Official | Stable | UI, API, CLI |
+| OCI | 51 | 13 | 1 | 10 | Official | Stable | CLI |
+| IaC | [See `trivy` docs.](https://trivy.dev/latest/docs/coverage/iac/) | N/A | N/A | N/A | Official | Beta | CLI |
+| MongoDB Atlas | 10 | 3 | 0 | 0 | Official | Beta | CLI |
+| LLM | [See `promptfoo` docs.](https://www.promptfoo.dev/docs/red-team/plugins/) | N/A | N/A | N/A | Official | Beta | CLI |
+| NHN | 6 | 2 | 1 | 0 | Unofficial | Beta | CLI |

 > [!Note]
 > The numbers in the table are updated periodically.
@@ -2,6 +2,8 @@

 All notable changes to the **Prowler API** are documented in this file.

+<<<<<<< HEAD
+=======
 ## [1.15.0] (Prowler UNRELEASED)

 ### Added
@@ -14,7 +16,6 @@ All notable changes to the **Prowler API** are documented in this file.
 - Support muting findings based on simple rules with custom reason [(#9051)](https://github.com/prowler-cloud/prowler/pull/9051)
 - Support C5 compliance framework for the GCP provider [(#9097)](https://github.com/prowler-cloud/prowler/pull/9097)
 - Support for Amazon Bedrock and OpenAI compatible providers in Lighthouse AI [(#8957)](https://github.com/prowler-cloud/prowler/pull/8957)
- OpenAPI schema integration with Mintlify documentation including compatibility fixes and dynamic server URL configuration [(#9168)](https://github.com/prowler-cloud/prowler/pull/9168)
 - Tenant-wide ThreatScore overview aggregation and snapshot persistence with backfill support [(#9148)](https://github.com/prowler-cloud/prowler/pull/9148)
 - Support for MongoDB Atlas provider [(#9167)](https://github.com/prowler-cloud/prowler/pull/9167)

@@ -29,6 +30,7 @@ All notable changes to the **Prowler API** are documented in this file.
 - Update unique constraint for `Provider` model to exclude soft-deleted entries, resolving duplicate errors when re-deleting providers.[(#9054)](https://github.com/prowler-cloud/prowler/pull/9054)
 - Remove compliance generation for providers without compliance frameworks [(#9208)](https://github.com/prowler-cloud/prowler/pull/9208)

+>>>>>>> 427dab681 (fix(compliance): handle check_id not in Prowler Checks (#9208))
 ## [1.14.1] (Prowler 5.13.1)

 ### Fixed
@@ -5,9 +5,6 @@ LABEL maintainer="https://github.com/prowler-cloud/api"
 ARG POWERSHELL_VERSION=7.5.0
 ENV POWERSHELL_VERSION=${POWERSHELL_VERSION}

-ARG TRIVY_VERSION=0.66.0
-ENV TRIVY_VERSION=${TRIVY_VERSION}
-
 # hadolint ignore=DL3008
 RUN apt-get update && apt-get install -y --no-install-recommends \
    wget \
@@ -39,24 +36,6 @@ RUN ARCH=$(uname -m) && \
    ln -s /opt/microsoft/powershell/7/pwsh /usr/bin/pwsh && \
    rm /tmp/powershell.tar.gz

-# Install Trivy for IaC scanning
-RUN ARCH=$(uname -m) && \
-    if [ "$ARCH" = "x86_64" ]; then \
-        TRIVY_ARCH="Linux-64bit" ; \
-    elif [ "$ARCH" = "aarch64" ]; then \
-        TRIVY_ARCH="Linux-ARM64" ; \
-    else \
-        echo "Unsupported architecture for Trivy: $ARCH" && exit 1 ; \
-    fi && \
-    wget --progress=dot:giga "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_${TRIVY_ARCH}.tar.gz" -O /tmp/trivy.tar.gz && \
-    tar zxf /tmp/trivy.tar.gz -C /tmp && \
-    mv /tmp/trivy /usr/local/bin/trivy && \
-    chmod +x /usr/local/bin/trivy && \
-    rm /tmp/trivy.tar.gz && \
-    # Create trivy cache directory with proper permissions
-    mkdir -p /tmp/.cache/trivy && \
-    chmod 777 /tmp/.cache/trivy
-
 # Add prowler user
 RUN addgroup --gid 1000 prowler && \
    adduser --uid 1000 --gid 1000 --disabled-password --gecos "" prowler
@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.1.4 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.1.3 and should not be changed by hand.

 [[package]]
 name = "about-time"
@@ -1164,6 +1164,18 @@ files = [
    {file = "charset_normalizer-3.4.3.tar.gz", hash = "sha256:6fce4b8500244f6fcb71465d4a4930d132ba9ab8e71a7859e6a5d59851068d14"},
 ]

+[[package]]
+name = "circuitbreaker"
+version = "2.1.3"
+description = "Python Circuit Breaker pattern implementation"
+optional = false
+python-versions = "*"
+groups = ["main"]
+files = [
+    {file = "circuitbreaker-2.1.3-py3-none-any.whl", hash = "sha256:87ba6a3ed03fdc7032bc175561c2b04d52ade9d5faf94ca2b035fbdc5e6b1dd1"},
+    {file = "circuitbreaker-2.1.3.tar.gz", hash = "sha256:1a4baee510f7bea3c91b194dcce7c07805fe96c4423ed5594b75af438531d084"},
+]
+
 [[package]]
 name = "click"
 version = "8.2.1"
@@ -1671,14 +1683,14 @@ with-social = ["django-allauth[socialaccount] (>=64.0.0)"]

 [[package]]
 name = "django"
-version = "5.1.14"
+version = "5.1.13"
 description = "A high-level Python web framework that encourages rapid development and clean, pragmatic design."
 optional = false
 python-versions = ">=3.10"
 groups = ["main", "dev"]
 files = [
-    {file = "django-5.1.14-py3-none-any.whl", hash = "sha256:2a4b9c20404fd1bf50aaaa5542a19d860594cba1354f688f642feb271b91df27"},
-    {file = "django-5.1.14.tar.gz", hash = "sha256:b98409fb31fdd6e8c3a6ba2eef3415cc5c0020057b43b21ba7af6eff5f014831"},
+    {file = "django-5.1.13-py3-none-any.whl", hash = "sha256:06f257f79dc4c17f3f9e23b106a4c5ed1335abecbe731e83c598c941d14fbeed"},
+    {file = "django-5.1.13.tar.gz", hash = "sha256:543ff21679f15e80edfc01fe7ea35f8291b6d4ea589433882913626a7c1cf929"},
 ]

 [package.dependencies]
@@ -4046,6 +4058,29 @@ rsa = ["cryptography (>=3.0.0)"]
 signals = ["blinker (>=1.4.0)"]
 signedtoken = ["cryptography (>=3.0.0)", "pyjwt (>=2.0.0,<3)"]

+[[package]]
+name = "oci"
+version = "2.160.3"
+description = "Oracle Cloud Infrastructure Python SDK"
+optional = false
+python-versions = "*"
+groups = ["main"]
+files = [
+    {file = "oci-2.160.3-py3-none-any.whl", hash = "sha256:858bff3e697098bdda44833d2476bfb4632126f0182178e7dbde4dbd156d71f0"},
+    {file = "oci-2.160.3.tar.gz", hash = "sha256:57514889be3b713a8385d86e3ba8a33cf46e3563c2a7e29a93027fb30b8a2537"},
+]
+
+[package.dependencies]
+certifi = "*"
+circuitbreaker = {version = ">=1.3.1,<3.0.0", markers = "python_version >= \"3.7\""}
+cryptography = ">=3.2.1,<46.0.0"
+pyOpenSSL = ">=17.5.0,<25.0.0"
+python-dateutil = ">=2.5.3,<3.0.0"
+pytz = ">=2016.10"
+
+[package.extras]
+adk = ["docstring-parser (>=0.16) ; python_version >= \"3.10\" and python_version < \"4\"", "mcp (>=1.6.0) ; python_version >= \"3.10\" and python_version < \"4\"", "pydantic (>=2.10.6) ; python_version >= \"3.10\" and python_version < \"4\"", "rich (>=13.9.4) ; python_version >= \"3.10\" and python_version < \"4\""]
+
 [[package]]
 name = "openai"
 version = "1.101.0"
@@ -4634,6 +4669,7 @@ markdown = "3.9.0"
 microsoft-kiota-abstractions = "1.9.2"
 msgraph-sdk = "1.23.0"
 numpy = "2.0.2"
+oci = "2.160.3"
 pandas = "2.2.3"
 py-iam-expand = "0.1.0"
 py-ocsf-models = "0.5.0"
@@ -4650,8 +4686,8 @@ tzlocal = "5.3.1"
 [package.source]
 type = "git"
 url = "https://github.com/prowler-cloud/prowler.git"
-reference = "master"
-resolved_reference = "a52697bfdfee83d14a49c11dcbe96888b5cd767e"
+reference = "v5.13"
+resolved_reference = "b1856e42f0143a64e8cc26c7aa3c7643bd1083d3"

 [[package]]
 name = "psutil"
@@ -5136,6 +5172,25 @@ cffi = ">=1.4.1"
 docs = ["sphinx (>=1.6.5)", "sphinx-rtd-theme"]
 tests = ["hypothesis (>=3.27.0)", "pytest (>=3.2.1,!=3.3.0)"]

+[[package]]
+name = "pyopenssl"
+version = "24.3.0"
+description = "Python wrapper module around the OpenSSL library"
+optional = false
+python-versions = ">=3.7"
+groups = ["main"]
+files = [
+    {file = "pyOpenSSL-24.3.0-py3-none-any.whl", hash = "sha256:e474f5a473cd7f92221cc04976e48f4d11502804657a08a989fb3be5514c904a"},
+    {file = "pyopenssl-24.3.0.tar.gz", hash = "sha256:49f7a019577d834746bc55c5fce6ecbcec0f2b4ec5ce1cf43a9a173b8138bb36"},
+]
+
+[package.dependencies]
+cryptography = ">=41.0.5,<45"
+
+[package.extras]
+docs = ["sphinx (!=5.2.0,!=5.2.0.post0,!=7.2.5)", "sphinx_rtd_theme"]
+test = ["pretend", "pytest (>=3.0.1)", "pytest-rerunfailures"]
+
 [[package]]
 name = "pyparsing"
 version = "3.2.3"
@@ -6786,4 +6841,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.11,<3.13"
-content-hash = "943e2cd6b87229704550d4e140b36509fb9f58896ebb5834b9fbabe28a9ee92f"
+content-hash = "8fcb616e55530e7940019d3da33e955b026b9105e1216a3c5f39b411c015b6d7"
@@ -7,7 +7,7 @@ authors = [{name = "Prowler Engineering", email = "engineering@prowler.com"}]
 dependencies = [
  "celery[pytest] (>=5.4.0,<6.0.0)",
  "dj-rest-auth[with_social,jwt] (==7.0.1)",
-  "django (==5.1.14)",
+  "django (==5.1.13)",
  "django-allauth[saml] (>=65.8.0,<66.0.0)",
  "django-celery-beat (>=2.7.0,<3.0.0)",
  "django-celery-results (>=2.5.1,<3.0.0)",
@@ -24,7 +24,7 @@ dependencies = [
  "drf-spectacular-jsonapi==0.5.1",
  "gunicorn==23.0.0",
  "lxml==5.3.2",
-  "prowler @ git+https://github.com/prowler-cloud/prowler.git@master",
+  "prowler @ git+https://github.com/prowler-cloud/prowler.git@v5.13",
  "psycopg2-binary==2.9.9",
  "pytest-celery[redis] (>=1.0.1,<2.0.0)",
  "sentry-sdk[django] (>=2.20.0,<3.0.0)",
@@ -43,7 +43,7 @@ name = "prowler-api"
 package-mode = false
 # Needed for the SDK compatibility
 requires-python = ">=3.11,<3.13"
-version = "1.15.0"
+version = "1.14.1"

 [project.scripts]
 celery = "src.backend.config.settings.celery"
@@ -0,0 +1,3 @@
+# from django.contrib import admin
+
+# Register your models here.
@@ -27,10 +27,7 @@ from api.models import (
    Finding,
    Integration,
    Invitation,
-    LighthouseProviderConfiguration,
-    LighthouseProviderModels,
    Membership,
-    MuteRule,
    OverviewStatusChoices,
    PermissionChoices,
    Processor,
@@ -47,7 +44,6 @@ from api.models import (
    StatusChoices,
    Task,
    TenantAPIKey,
-    ThreatScoreSnapshot,
    User,
 )
 from api.rls import Tenant
@@ -249,14 +245,6 @@ class ProviderFilter(FilterSet):
        choices=Provider.ProviderChoices.choices,
        lookup_expr="in",
    )
-    provider_type = ChoiceFilter(
-        choices=Provider.ProviderChoices.choices, field_name="provider"
-    )
-    provider_type__in = ChoiceInFilter(
-        field_name="provider",
-        choices=Provider.ProviderChoices.choices,
-        lookup_expr="in",
-    )

    class Meta:
        model = Provider
@@ -940,95 +928,3 @@ class TenantApiKeyFilter(FilterSet):
            "revoked": ["exact"],
            "name": ["exact", "icontains"],
        }
-
-
-class LighthouseProviderConfigFilter(FilterSet):
-    provider_type = ChoiceFilter(
-        choices=LighthouseProviderConfiguration.LLMProviderChoices.choices
-    )
-    provider_type__in = ChoiceInFilter(
-        choices=LighthouseProviderConfiguration.LLMProviderChoices.choices,
-        field_name="provider_type",
-        lookup_expr="in",
-    )
-    is_active = BooleanFilter()
-
-    class Meta:
-        model = LighthouseProviderConfiguration
-        fields = {
-            "provider_type": ["exact", "in"],
-            "is_active": ["exact"],
-        }
-
-
-class LighthouseProviderModelsFilter(FilterSet):
-    provider_type = ChoiceFilter(
-        choices=LighthouseProviderConfiguration.LLMProviderChoices.choices,
-        field_name="provider_configuration__provider_type",
-    )
-    provider_type__in = ChoiceInFilter(
-        choices=LighthouseProviderConfiguration.LLMProviderChoices.choices,
-        field_name="provider_configuration__provider_type",
-        lookup_expr="in",
-    )
-
-    # Allow filtering by model id
-    model_id = CharFilter(field_name="model_id", lookup_expr="exact")
-    model_id__icontains = CharFilter(field_name="model_id", lookup_expr="icontains")
-    model_id__in = CharInFilter(field_name="model_id", lookup_expr="in")
-
-    class Meta:
-        model = LighthouseProviderModels
-        fields = {
-            "model_id": ["exact", "icontains", "in"],
-        }
-
-
-class MuteRuleFilter(FilterSet):
-    inserted_at = DateFilter(field_name="inserted_at", lookup_expr="date")
-    updated_at = DateFilter(field_name="updated_at", lookup_expr="date")
-    created_by = UUIDFilter(field_name="created_by__id", lookup_expr="exact")
-
-    class Meta:
-        model = MuteRule
-        fields = {
-            "id": ["exact", "in"],
-            "name": ["exact", "icontains"],
-            "reason": ["icontains"],
-            "enabled": ["exact"],
-            "inserted_at": ["gte", "lte"],
-            "updated_at": ["gte", "lte"],
-        }
-
-
-class ThreatScoreSnapshotFilter(FilterSet):
-    """
-    Filter for ThreatScore snapshots.
-    Allows filtering by scan, provider, compliance_id, and date ranges.
-    """
-
-    inserted_at = DateFilter(field_name="inserted_at", lookup_expr="date")
-    scan_id = UUIDFilter(field_name="scan__id", lookup_expr="exact")
-    scan_id__in = UUIDInFilter(field_name="scan__id", lookup_expr="in")
-    provider_id = UUIDFilter(field_name="provider__id", lookup_expr="exact")
-    provider_id__in = UUIDInFilter(field_name="provider__id", lookup_expr="in")
-    provider_type = ChoiceFilter(
-        field_name="provider__provider", choices=Provider.ProviderChoices.choices
-    )
-    provider_type__in = ChoiceInFilter(
-        field_name="provider__provider",
-        choices=Provider.ProviderChoices.choices,
-        lookup_expr="in",
-    )
-    compliance_id = CharFilter(field_name="compliance_id", lookup_expr="exact")
-    compliance_id__in = CharInFilter(field_name="compliance_id", lookup_expr="in")
-
-    class Meta:
-        model = ThreatScoreSnapshot
-        fields = {
-            "scan": ["exact", "in"],
-            "provider": ["exact", "in"],
-            "compliance_id": ["exact", "in"],
-            "inserted_at": ["date", "gte", "lte"],
-            "overall_score": ["exact", "gte", "lte"],
-        }
@@ -1,266 +0,0 @@
-# Generated by Django 5.1.12 on 2025-10-09 07:50
-
-import json
-import logging
-import uuid
-
-import django.db.models.deletion
-from config.custom_logging import BackendLogger
-from cryptography.fernet import Fernet
-from django.conf import settings
-from django.db import migrations, models
-
-import api.rls
-from api.db_router import MainRouter
-
-logger = logging.getLogger(BackendLogger.API)
-
-
-def migrate_lighthouse_configs_forward(apps, schema_editor):
-    """
-    Migrate data from old LighthouseConfiguration to new multi-provider models.
-    Old system: one LighthouseConfiguration per tenant (always OpenAI).
-    """
-    LighthouseConfiguration = apps.get_model("api", "LighthouseConfiguration")
-    LighthouseProviderConfiguration = apps.get_model(
-        "api", "LighthouseProviderConfiguration"
-    )
-    LighthouseTenantConfiguration = apps.get_model(
-        "api", "LighthouseTenantConfiguration"
-    )
-    LighthouseProviderModels = apps.get_model("api", "LighthouseProviderModels")
-
-    fernet = Fernet(settings.SECRETS_ENCRYPTION_KEY.encode())
-
-    # Migrate only tenants that actually have a LighthouseConfiguration
-    for old_config in (
-        LighthouseConfiguration.objects.using(MainRouter.admin_db)
-        .select_related("tenant")
-        .all()
-    ):
-        tenant = old_config.tenant
-        tenant_id = str(tenant.id)
-
-        try:
-            # Create OpenAI provider configuration for this tenant
-            api_key_decrypted = fernet.decrypt(bytes(old_config.api_key)).decode()
-            credentials_encrypted = fernet.encrypt(
-                json.dumps({"api_key": api_key_decrypted}).encode()
-            )
-            provider_config = LighthouseProviderConfiguration.objects.using(
-                MainRouter.admin_db
-            ).create(
-                tenant=tenant,
-                provider_type="openai",
-                credentials=credentials_encrypted,
-                is_active=old_config.is_active,
-            )
-
-            # Create tenant configuration from old values
-            LighthouseTenantConfiguration.objects.using(MainRouter.admin_db).create(
-                tenant=tenant,
-                business_context=old_config.business_context or "",
-                default_provider="openai",
-                default_models={"openai": old_config.model},
-            )
-
-            # Create initial provider model record
-            LighthouseProviderModels.objects.using(MainRouter.admin_db).create(
-                tenant=tenant,
-                provider_configuration=provider_config,
-                model_id=old_config.model,
-                model_name=old_config.model,
-                default_parameters={},
-            )
-
-        except Exception:
-            logger.exception(
-                "Failed to migrate lighthouse config for tenant %s", tenant_id
-            )
-            continue
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0049_compliancerequirementoverview_passed_failed_findings"),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name="LighthouseProviderConfiguration",
-            fields=[
-                (
-                    "id",
-                    models.UUIDField(
-                        default=uuid.uuid4,
-                        editable=False,
-                        primary_key=True,
-                        serialize=False,
-                    ),
-                ),
-                ("inserted_at", models.DateTimeField(auto_now_add=True)),
-                ("updated_at", models.DateTimeField(auto_now=True)),
-                (
-                    "provider_type",
-                    models.CharField(
-                        choices=[("openai", "OpenAI")],
-                        help_text="LLM provider name",
-                        max_length=50,
-                    ),
-                ),
-                ("base_url", models.URLField(blank=True, null=True)),
-                (
-                    "credentials",
-                    models.BinaryField(
-                        help_text="Encrypted JSON credentials for the provider"
-                    ),
-                ),
-                ("is_active", models.BooleanField(default=True)),
-            ],
-            options={
-                "db_table": "lighthouse_provider_configurations",
-                "abstract": False,
-            },
-        ),
-        migrations.CreateModel(
-            name="LighthouseProviderModels",
-            fields=[
-                (
-                    "id",
-                    models.UUIDField(
-                        default=uuid.uuid4,
-                        editable=False,
-                        primary_key=True,
-                        serialize=False,
-                    ),
-                ),
-                ("inserted_at", models.DateTimeField(auto_now_add=True)),
-                ("updated_at", models.DateTimeField(auto_now=True)),
-                ("model_id", models.CharField(max_length=100)),
-                ("model_name", models.CharField(max_length=100)),
-                ("default_parameters", models.JSONField(blank=True, default=dict)),
-            ],
-            options={
-                "db_table": "lighthouse_provider_models",
-                "abstract": False,
-            },
-        ),
-        migrations.CreateModel(
-            name="LighthouseTenantConfiguration",
-            fields=[
-                (
-                    "id",
-                    models.UUIDField(
-                        default=uuid.uuid4,
-                        editable=False,
-                        primary_key=True,
-                        serialize=False,
-                    ),
-                ),
-                ("inserted_at", models.DateTimeField(auto_now_add=True)),
-                ("updated_at", models.DateTimeField(auto_now=True)),
-                ("business_context", models.TextField(blank=True, default="")),
-                ("default_provider", models.CharField(blank=True, max_length=50)),
-                ("default_models", models.JSONField(blank=True, default=dict)),
-            ],
-            options={
-                "db_table": "lighthouse_tenant_config",
-                "abstract": False,
-            },
-        ),
-        migrations.AddField(
-            model_name="lighthouseproviderconfiguration",
-            name="tenant",
-            field=models.ForeignKey(
-                on_delete=django.db.models.deletion.CASCADE, to="api.tenant"
-            ),
-        ),
-        migrations.AddField(
-            model_name="lighthouseprovidermodels",
-            name="provider_configuration",
-            field=models.ForeignKey(
-                on_delete=django.db.models.deletion.CASCADE,
-                related_name="available_models",
-                to="api.lighthouseproviderconfiguration",
-            ),
-        ),
-        migrations.AddField(
-            model_name="lighthouseprovidermodels",
-            name="tenant",
-            field=models.ForeignKey(
-                on_delete=django.db.models.deletion.CASCADE, to="api.tenant"
-            ),
-        ),
-        migrations.AddField(
-            model_name="lighthousetenantconfiguration",
-            name="tenant",
-            field=models.ForeignKey(
-                on_delete=django.db.models.deletion.CASCADE, to="api.tenant"
-            ),
-        ),
-        migrations.AddIndex(
-            model_name="lighthouseproviderconfiguration",
-            index=models.Index(
-                fields=["tenant_id", "provider_type"], name="lh_pc_tenant_type_idx"
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="lighthouseproviderconfiguration",
-            constraint=api.rls.RowLevelSecurityConstraint(
-                "tenant_id",
-                name="rls_on_lighthouseproviderconfiguration",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="lighthouseproviderconfiguration",
-            constraint=models.UniqueConstraint(
-                fields=("tenant_id", "provider_type"),
-                name="unique_provider_config_per_tenant",
-            ),
-        ),
-        migrations.AddIndex(
-            model_name="lighthouseprovidermodels",
-            index=models.Index(
-                fields=["tenant_id", "provider_configuration"],
-                name="lh_prov_models_cfg_idx",
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="lighthouseprovidermodels",
-            constraint=api.rls.RowLevelSecurityConstraint(
-                "tenant_id",
-                name="rls_on_lighthouseprovidermodels",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="lighthouseprovidermodels",
-            constraint=models.UniqueConstraint(
-                fields=("tenant_id", "provider_configuration", "model_id"),
-                name="unique_provider_model_per_configuration",
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="lighthousetenantconfiguration",
-            constraint=api.rls.RowLevelSecurityConstraint(
-                "tenant_id",
-                name="rls_on_lighthousetenantconfiguration",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="lighthousetenantconfiguration",
-            constraint=models.UniqueConstraint(
-                fields=("tenant_id",), name="unique_tenant_lighthouse_config"
-            ),
-        ),
-        # Migrate data from old LighthouseConfiguration to new tables
-        # This runs after all tables, indexes, and constraints are created
-        # The old Lighthouse configuration table is not removed, so reverse_code is noop
-        # During rollbacks, the old Lighthouse configuration remains intact while the new tables are removed
-        migrations.RunPython(
-            migrate_lighthouse_configs_forward,
-            reverse_code=migrations.RunPython.noop,
-        ),
-    ]
@@ -1,34 +0,0 @@
-# Generated by Django 5.1.7 on 2025-10-14 00:00
-
-from django.db import migrations
-
-import api.db_utils
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0050_lighthouse_multi_llm"),
-    ]
-
-    operations = [
-        migrations.AlterField(
-            model_name="provider",
-            name="provider",
-            field=api.db_utils.ProviderEnumField(
-                choices=[
-                    ("aws", "AWS"),
-                    ("azure", "Azure"),
-                    ("gcp", "GCP"),
-                    ("kubernetes", "Kubernetes"),
-                    ("m365", "M365"),
-                    ("github", "GitHub"),
-                    ("oraclecloud", "Oracle Cloud Infrastructure"),
-                ],
-                default="aws",
-            ),
-        ),
-        migrations.RunSQL(
-            "ALTER TYPE provider ADD VALUE IF NOT EXISTS 'oraclecloud';",
-            reverse_sql=migrations.RunSQL.noop,
-        ),
-    ]
@@ -1,117 +0,0 @@
-# Generated by Django 5.1.13 on 2025-10-22 11:56
-
-import uuid
-
-import django.contrib.postgres.fields
-import django.core.validators
-import django.db.models.deletion
-from django.conf import settings
-from django.db import migrations, models
-
-import api.rls
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0051_oraclecloud_provider"),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name="MuteRule",
-            fields=[
-                (
-                    "id",
-                    models.UUIDField(
-                        default=uuid.uuid4,
-                        editable=False,
-                        primary_key=True,
-                        serialize=False,
-                    ),
-                ),
-                ("inserted_at", models.DateTimeField(auto_now_add=True)),
-                ("updated_at", models.DateTimeField(auto_now=True)),
-                (
-                    "name",
-                    models.CharField(
-                        help_text="Human-readable name for this rule",
-                        max_length=100,
-                        validators=[django.core.validators.MinLengthValidator(3)],
-                    ),
-                ),
-                (
-                    "reason",
-                    models.TextField(
-                        help_text="Reason for muting",
-                        max_length=500,
-                        validators=[django.core.validators.MinLengthValidator(3)],
-                    ),
-                ),
-                (
-                    "enabled",
-                    models.BooleanField(
-                        default=True, help_text="Whether this rule is currently enabled"
-                    ),
-                ),
-                (
-                    "finding_uids",
-                    django.contrib.postgres.fields.ArrayField(
-                        base_field=models.CharField(max_length=255),
-                        help_text="List of finding UIDs to mute",
-                        size=None,
-                    ),
-                ),
-            ],
-            options={
-                "db_table": "mute_rules",
-                "abstract": False,
-            },
-        ),
-        migrations.AddField(
-            model_name="finding",
-            name="muted_at",
-            field=models.DateTimeField(
-                blank=True, help_text="Timestamp when this finding was muted", null=True
-            ),
-        ),
-        migrations.AlterField(
-            model_name="tenantapikey",
-            name="name",
-            field=models.CharField(
-                max_length=100,
-                validators=[django.core.validators.MinLengthValidator(3)],
-            ),
-        ),
-        migrations.AddField(
-            model_name="muterule",
-            name="created_by",
-            field=models.ForeignKey(
-                help_text="User who created this rule",
-                null=True,
-                on_delete=django.db.models.deletion.SET_NULL,
-                related_name="created_mute_rules",
-                to=settings.AUTH_USER_MODEL,
-            ),
-        ),
-        migrations.AddField(
-            model_name="muterule",
-            name="tenant",
-            field=models.ForeignKey(
-                on_delete=django.db.models.deletion.CASCADE, to="api.tenant"
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="muterule",
-            constraint=api.rls.RowLevelSecurityConstraint(
-                "tenant_id",
-                name="rls_on_muterule",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="muterule",
-            constraint=models.UniqueConstraint(
-                fields=("tenant_id", "name"), name="unique_mute_rule_name_per_tenant"
-            ),
-        ),
-    ]
@@ -1,25 +0,0 @@
-# Generated by Django 5.1.12 on 2025-10-14 11:46
-
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0052_mute_rules"),
-    ]
-
-    operations = [
-        migrations.AlterField(
-            model_name="lighthouseproviderconfiguration",
-            name="provider_type",
-            field=models.CharField(
-                choices=[
-                    ("openai", "OpenAI"),
-                    ("bedrock", "AWS Bedrock"),
-                    ("openai_compatible", "OpenAI Compatible"),
-                ],
-                help_text="LLM provider name",
-                max_length=50,
-            ),
-        )
-    ]
@@ -1,35 +0,0 @@
-# Generated by Django 5.1.10 on 2025-09-09 09:25
-
-from django.db import migrations
-
-import api.db_utils
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0053_lighthouse_bedrock_openai_compatible"),
-    ]
-
-    operations = [
-        migrations.AlterField(
-            model_name="provider",
-            name="provider",
-            field=api.db_utils.ProviderEnumField(
-                choices=[
-                    ("aws", "AWS"),
-                    ("azure", "Azure"),
-                    ("gcp", "GCP"),
-                    ("kubernetes", "Kubernetes"),
-                    ("m365", "M365"),
-                    ("github", "GitHub"),
-                    ("oci", "Oracle Cloud Infrastructure"),
-                    ("iac", "IaC"),
-                ],
-                default="aws",
-            ),
-        ),
-        migrations.RunSQL(
-            "ALTER TYPE provider ADD VALUE IF NOT EXISTS 'iac';",
-            reverse_sql=migrations.RunSQL.noop,
-        ),
-    ]
@@ -1,32 +0,0 @@
-# Generated by Django 5.1.13 on 2025-11-05 08:37
-
-from django.db import migrations
-
-import api.db_utils
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0054_iac_provider"),
-    ]
-
-    operations = [
-        migrations.AlterField(
-            model_name="provider",
-            name="provider",
-            field=api.db_utils.ProviderEnumField(
-                choices=[
-                    ("aws", "AWS"),
-                    ("azure", "Azure"),
-                    ("gcp", "GCP"),
-                    ("kubernetes", "Kubernetes"),
-                    ("m365", "M365"),
-                    ("github", "GitHub"),
-                    ("mongodbatlas", "MongoDB Atlas"),
-                    ("iac", "IaC"),
-                    ("oraclecloud", "Oracle Cloud Infrastructure"),
-                ],
-                default="aws",
-            ),
-        ),
-    ]
@@ -1,24 +0,0 @@
-# Generated by Django 5.1.13 on 2025-11-06 09:20
-
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0055_mongodbatlas_provider"),
-    ]
-
-    operations = [
-        migrations.RemoveConstraint(
-            model_name="provider",
-            name="unique_provider_uids",
-        ),
-        migrations.AddConstraint(
-            model_name="provider",
-            constraint=models.UniqueConstraint(
-                condition=models.Q(("is_deleted", False)),
-                fields=("tenant_id", "provider", "uid"),
-                name="unique_provider_uids",
-            ),
-        ),
-    ]
@@ -1,170 +0,0 @@
-# Generated by Django 5.1.13 on 2025-10-31 09:04
-
-import uuid
-
-import django.db.models.deletion
-from django.db import migrations, models
-
-import api.rls
-
-
-class Migration(migrations.Migration):
-    dependencies = [
-        ("api", "0056_remove_provider_unique_provider_uids_and_more"),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name="ThreatScoreSnapshot",
-            fields=[
-                (
-                    "id",
-                    models.UUIDField(
-                        default=uuid.uuid4,
-                        editable=False,
-                        primary_key=True,
-                        serialize=False,
-                    ),
-                ),
-                ("inserted_at", models.DateTimeField(auto_now_add=True)),
-                (
-                    "compliance_id",
-                    models.CharField(
-                        help_text="Compliance framework ID (e.g., 'prowler_threatscore_aws')",
-                        max_length=100,
-                    ),
-                ),
-                (
-                    "overall_score",
-                    models.DecimalField(
-                        decimal_places=2,
-                        help_text="Overall ThreatScore percentage (0-100)",
-                        max_digits=5,
-                    ),
-                ),
-                (
-                    "score_delta",
-                    models.DecimalField(
-                        blank=True,
-                        decimal_places=2,
-                        help_text="Score change compared to previous snapshot (positive = improvement)",
-                        max_digits=5,
-                        null=True,
-                    ),
-                ),
-                (
-                    "section_scores",
-                    models.JSONField(
-                        blank=True,
-                        default=dict,
-                        help_text="ThreatScore breakdown by section",
-                    ),
-                ),
-                (
-                    "critical_requirements",
-                    models.JSONField(
-                        blank=True,
-                        default=list,
-                        help_text="List of critical failed requirements (risk >= 4)",
-                    ),
-                ),
-                (
-                    "total_requirements",
-                    models.IntegerField(
-                        default=0, help_text="Total number of requirements evaluated"
-                    ),
-                ),
-                (
-                    "passed_requirements",
-                    models.IntegerField(
-                        default=0, help_text="Number of requirements with PASS status"
-                    ),
-                ),
-                (
-                    "failed_requirements",
-                    models.IntegerField(
-                        default=0, help_text="Number of requirements with FAIL status"
-                    ),
-                ),
-                (
-                    "manual_requirements",
-                    models.IntegerField(
-                        default=0, help_text="Number of requirements with MANUAL status"
-                    ),
-                ),
-                (
-                    "total_findings",
-                    models.IntegerField(
-                        default=0,
-                        help_text="Total number of findings across all requirements",
-                    ),
-                ),
-                (
-                    "passed_findings",
-                    models.IntegerField(
-                        default=0, help_text="Number of findings with PASS status"
-                    ),
-                ),
-                (
-                    "failed_findings",
-                    models.IntegerField(
-                        default=0, help_text="Number of findings with FAIL status"
-                    ),
-                ),
-                (
-                    "provider",
-                    models.ForeignKey(
-                        on_delete=django.db.models.deletion.CASCADE,
-                        related_name="threatscore_snapshots",
-                        related_query_name="threatscore_snapshot",
-                        to="api.provider",
-                    ),
-                ),
-                (
-                    "scan",
-                    models.ForeignKey(
-                        on_delete=django.db.models.deletion.CASCADE,
-                        related_name="threatscore_snapshots",
-                        related_query_name="threatscore_snapshot",
-                        to="api.scan",
-                    ),
-                ),
-                (
-                    "tenant",
-                    models.ForeignKey(
-                        on_delete=django.db.models.deletion.CASCADE, to="api.tenant"
-                    ),
-                ),
-            ],
-            options={
-                "db_table": "threatscore_snapshots",
-                "abstract": False,
-            },
-        ),
-        migrations.AddIndex(
-            model_name="threatscoresnapshot",
-            index=models.Index(
-                fields=["tenant_id", "scan_id"], name="threatscore_snap_t_scan_idx"
-            ),
-        ),
-        migrations.AddIndex(
-            model_name="threatscoresnapshot",
-            index=models.Index(
-                fields=["tenant_id", "provider_id"], name="threatscore_snap_t_prov_idx"
-            ),
-        ),
-        migrations.AddIndex(
-            model_name="threatscoresnapshot",
-            index=models.Index(
-                fields=["tenant_id", "inserted_at"], name="threatscore_snap_t_time_idx"
-            ),
-        ),
-        migrations.AddConstraint(
-            model_name="threatscoresnapshot",
-            constraint=api.rls.RowLevelSecurityConstraint(
-                "tenant_id",
-                name="rls_on_threatscoresnapshot",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ),
-    ]
@@ -284,9 +284,6 @@ class Provider(RowLevelSecurityProtectedModel):
        KUBERNETES = "kubernetes", _("Kubernetes")
        M365 = "m365", _("M365")
        GITHUB = "github", _("GitHub")
-        MONGODBATLAS = "mongodbatlas", _("MongoDB Atlas")
-        IAC = "iac", _("IaC")
-        ORACLECLOUD = "oraclecloud", _("Oracle Cloud Infrastructure")

    @staticmethod
    def validate_aws_uid(value):
@@ -357,40 +354,6 @@ class Provider(RowLevelSecurityProtectedModel):
                pointer="/data/attributes/uid",
            )

-    @staticmethod
-    def validate_iac_uid(value):
-        # Validate that it's a valid repository URL (git URL format)
-        if not re.match(
-            r"^(https?://|git@|ssh://)[^\s/]+[^\s]*\.git$|^(https?://)[^\s/]+[^\s]*$",
-            value,
-        ):
-            raise ModelValidationError(
-                detail="IaC provider ID must be a valid repository URL (e.g., https://github.com/user/repo or https://github.com/user/repo.git).",
-                code="iac-uid",
-                pointer="/data/attributes/uid",
-            )
-
-    @staticmethod
-    def validate_oraclecloud_uid(value):
-        if not re.match(
-            r"^ocid1\.([a-z0-9_-]+)\.([a-z0-9_-]+)\.([a-z0-9_-]*)\.([a-z0-9]+)$", value
-        ):
-            raise ModelValidationError(
-                detail="Oracle Cloud Infrastructure provider ID must be a valid tenancy OCID in the format: "
-                "ocid1.<resource_type>.<realm>.<region>.<unique_id>",
-                code="oraclecloud-uid",
-                pointer="/data/attributes/uid",
-            )
-
-    @staticmethod
-    def validate_mongodbatlas_uid(value):
-        if not re.match(r"^[0-9a-fA-F]{24}$", value):
-            raise ModelValidationError(
-                detail="MongoDB Atlas organization ID must be a 24-character hexadecimal string.",
-                code="mongodbatlas-uid",
-                pointer="/data/attributes/uid",
-            )
-
    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
    updated_at = models.DateTimeField(auto_now=True, editable=False)
@@ -425,8 +388,7 @@ class Provider(RowLevelSecurityProtectedModel):

        constraints = [
            models.UniqueConstraint(
-                fields=("tenant_id", "provider", "uid"),
-                condition=Q(is_deleted=False),
+                fields=("tenant_id", "provider", "uid", "is_deleted"),
                name="unique_provider_uids",
            ),
            RowLevelSecurityConstraint(
@@ -848,9 +810,6 @@ class Finding(PostgresPartitionedModel, RowLevelSecurityProtectedModel):
    muted_reason = models.TextField(
        blank=True, null=True, validators=[MinLengthValidator(3)], max_length=500
    )
-    muted_at = models.DateTimeField(
-        null=True, blank=True, help_text="Timestamp when this finding was muted"
-    )
    compliance = models.JSONField(default=dict, null=True, blank=True)

    # Denormalize resource data for performance
@@ -1914,6 +1873,22 @@ class LighthouseConfiguration(RowLevelSecurityProtectedModel):
    def clean(self):
        super().clean()

+        # Validate temperature
+        if not 0 <= self.temperature <= 1:
+            raise ModelValidationError(
+                detail="Temperature must be between 0 and 1",
+                code="invalid_temperature",
+                pointer="/data/attributes/temperature",
+            )
+
+        # Validate max_tokens
+        if not 500 <= self.max_tokens <= 5000:
+            raise ModelValidationError(
+                detail="Max tokens must be between 500 and 5000",
+                code="invalid_max_tokens",
+                pointer="/data/attributes/max_tokens",
+            )
+
    @property
    def api_key_decoded(self):
        """Return the decrypted API key, or None if unavailable or invalid."""
@@ -1938,6 +1913,15 @@ class LighthouseConfiguration(RowLevelSecurityProtectedModel):
                code="invalid_api_key",
                pointer="/data/attributes/api_key",
            )
+
+        # Validate OpenAI API key format
+        openai_key_pattern = r"^sk-[\w-]+T3BlbkFJ[\w-]+$"
+        if not re.match(openai_key_pattern, value):
+            raise ModelValidationError(
+                detail="Invalid OpenAI API key format.",
+                code="invalid_api_key",
+                pointer="/data/attributes/api_key",
+            )
        self.api_key = fernet.encrypt(value.encode())

    def save(self, *args, **kwargs):
@@ -1963,59 +1947,6 @@ class LighthouseConfiguration(RowLevelSecurityProtectedModel):
        resource_name = "lighthouse-configurations"


-class MuteRule(RowLevelSecurityProtectedModel):
-    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
-    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
-    updated_at = models.DateTimeField(auto_now=True, editable=False)
-
-    # Rule metadata
-    name = models.CharField(
-        max_length=100,
-        validators=[MinLengthValidator(3)],
-        help_text="Human-readable name for this rule",
-    )
-    reason = models.TextField(
-        validators=[MinLengthValidator(3)],
-        max_length=500,
-        help_text="Reason for muting",
-    )
-    enabled = models.BooleanField(
-        default=True, help_text="Whether this rule is currently enabled"
-    )
-
-    # Audit fields
-    created_by = models.ForeignKey(
-        User,
-        on_delete=models.SET_NULL,
-        null=True,
-        related_name="created_mute_rules",
-        help_text="User who created this rule",
-    )
-
-    # Rule criteria - array of finding UIDs
-    finding_uids = ArrayField(
-        models.CharField(max_length=255), help_text="List of finding UIDs to mute"
-    )
-
-    class Meta(RowLevelSecurityProtectedModel.Meta):
-        db_table = "mute_rules"
-
-        constraints = [
-            RowLevelSecurityConstraint(
-                field="tenant_id",
-                name="rls_on_%(class)s",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-            models.UniqueConstraint(
-                fields=("tenant_id", "name"),
-                name="unique_mute_rule_name_per_tenant",
-            ),
-        ]
-
-    class JSONAPIMeta:
-        resource_name = "mute-rules"
-
-
 class Processor(RowLevelSecurityProtectedModel):
    class ProcessorChoices(models.TextChoices):
        MUTELIST = "mutelist", _("Mutelist")
@@ -2053,323 +1984,3 @@ class Processor(RowLevelSecurityProtectedModel):

    class JSONAPIMeta:
        resource_name = "processors"
-
-
-class LighthouseProviderConfiguration(RowLevelSecurityProtectedModel):
-    """
-    Per-tenant configuration for an LLM provider (credentials, base URL, activation).
-
-    One configuration per provider type per tenant.
-    """
-
-    class LLMProviderChoices(models.TextChoices):
-        OPENAI = "openai", _("OpenAI")
-        BEDROCK = "bedrock", _("AWS Bedrock")
-        OPENAI_COMPATIBLE = "openai_compatible", _("OpenAI Compatible")
-
-    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
-    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
-    updated_at = models.DateTimeField(auto_now=True, editable=False)
-
-    provider_type = models.CharField(
-        max_length=50,
-        choices=LLMProviderChoices.choices,
-        help_text="LLM provider name",
-    )
-
-    # For OpenAI-compatible providers
-    base_url = models.URLField(blank=True, null=True)
-
-    # Encrypted JSON for provider-specific auth
-    credentials = models.BinaryField(
-        blank=False, null=False, help_text="Encrypted JSON credentials for the provider"
-    )
-
-    is_active = models.BooleanField(default=True)
-
-    def __str__(self):
-        return f"{self.get_provider_type_display()} ({self.tenant_id})"
-
-    def clean(self):
-        super().clean()
-
-    @property
-    def credentials_decoded(self):
-        if not self.credentials:
-            return None
-        try:
-            decrypted_data = fernet.decrypt(bytes(self.credentials))
-            return json.loads(decrypted_data.decode())
-        except (InvalidToken, json.JSONDecodeError) as e:
-            logger.warning("Failed to decrypt provider credentials: %s", e)
-            return None
-        except Exception as e:
-            logger.exception(
-                "Unexpected error while decrypting provider credentials: %s", e
-            )
-            return None
-
-    @credentials_decoded.setter
-    def credentials_decoded(self, value):
-        """
-        Set and encrypt credentials (assumes serializer performed validation).
-        """
-        if not value:
-            raise ModelValidationError(
-                detail="Credentials are required",
-                code="invalid_credentials",
-                pointer="/data/attributes/credentials",
-            )
-        self.credentials = fernet.encrypt(json.dumps(value).encode())
-
-    class Meta(RowLevelSecurityProtectedModel.Meta):
-        db_table = "lighthouse_provider_configurations"
-
-        constraints = [
-            RowLevelSecurityConstraint(
-                field="tenant_id",
-                name="rls_on_%(class)s",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-            models.UniqueConstraint(
-                fields=["tenant_id", "provider_type"],
-                name="unique_provider_config_per_tenant",
-            ),
-        ]
-
-        indexes = [
-            models.Index(
-                fields=["tenant_id", "provider_type"],
-                name="lh_pc_tenant_type_idx",
-            ),
-        ]
-
-    class JSONAPIMeta:
-        resource_name = "lighthouse-providers"
-
-
-class LighthouseTenantConfiguration(RowLevelSecurityProtectedModel):
-    """
-    Tenant-level Lighthouse settings (business context and defaults).
-    One record per tenant.
-    """
-
-    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
-    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
-    updated_at = models.DateTimeField(auto_now=True, editable=False)
-
-    business_context = models.TextField(blank=True, default="")
-
-    # Preferred provider key (e.g., "openai", "bedrock", "openai_compatible")
-    default_provider = models.CharField(max_length=50, blank=True)
-
-    # Mapping of provider -> model id, e.g., {"openai": "gpt-4o", "bedrock": "anthropic.claude-v2"}
-    default_models = models.JSONField(default=dict, blank=True)
-
-    def __str__(self):
-        return f"Lighthouse Tenant Config for {self.tenant_id}"
-
-    def clean(self):
-        super().clean()
-
-    class Meta(RowLevelSecurityProtectedModel.Meta):
-        db_table = "lighthouse_tenant_config"
-
-        constraints = [
-            RowLevelSecurityConstraint(
-                field="tenant_id",
-                name="rls_on_%(class)s",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-            models.UniqueConstraint(
-                fields=["tenant_id"], name="unique_tenant_lighthouse_config"
-            ),
-        ]
-
-    class JSONAPIMeta:
-        resource_name = "lighthouse-configurations"
-
-
-class LighthouseProviderModels(RowLevelSecurityProtectedModel):
-    """
-    Per-tenant, per-provider configuration list of available LLM models.
-    RLS-protected; populated via provider API using tenant-scoped credentials.
-    """
-
-    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
-    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
-    updated_at = models.DateTimeField(auto_now=True, editable=False)
-
-    # Scope to a specific provider configuration within a tenant
-    provider_configuration = models.ForeignKey(
-        LighthouseProviderConfiguration,
-        on_delete=models.CASCADE,
-        related_name="available_models",
-    )
-    model_id = models.CharField(max_length=100)
-
-    # Human-friendly model name
-    model_name = models.CharField(max_length=100)
-
-    # Model-specific default parameters (e.g., temperature, max_tokens)
-    default_parameters = models.JSONField(default=dict, blank=True)
-
-    def __str__(self):
-        return f"{self.provider_configuration.provider_type}:{self.model_id} ({self.tenant_id})"
-
-    class Meta(RowLevelSecurityProtectedModel.Meta):
-        db_table = "lighthouse_provider_models"
-        constraints = [
-            RowLevelSecurityConstraint(
-                field="tenant_id",
-                name="rls_on_%(class)s",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-            models.UniqueConstraint(
-                fields=["tenant_id", "provider_configuration", "model_id"],
-                name="unique_provider_model_per_configuration",
-            ),
-        ]
-        indexes = [
-            models.Index(
-                fields=["tenant_id", "provider_configuration"],
-                name="lh_prov_models_cfg_idx",
-            ),
-        ]
-
-    class JSONAPIMeta:
-        resource_name = "lighthouse-models"
-
-
-class ThreatScoreSnapshot(RowLevelSecurityProtectedModel):
-    """
-    Stores historical ThreatScore metrics for a given scan.
-    Snapshots are created automatically after each ThreatScore report generation.
-    """
-
-    objects = models.Manager()
-    all_objects = models.Manager()
-
-    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
-    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
-
-    scan = models.ForeignKey(
-        Scan,
-        on_delete=models.CASCADE,
-        related_name="threatscore_snapshots",
-        related_query_name="threatscore_snapshot",
-    )
-
-    provider = models.ForeignKey(
-        Provider,
-        on_delete=models.CASCADE,
-        related_name="threatscore_snapshots",
-        related_query_name="threatscore_snapshot",
-    )
-
-    compliance_id = models.CharField(
-        max_length=100,
-        blank=False,
-        null=False,
-        help_text="Compliance framework ID (e.g., 'prowler_threatscore_aws')",
-    )
-
-    # Overall ThreatScore metrics
-    overall_score = models.DecimalField(
-        max_digits=5,
-        decimal_places=2,
-        help_text="Overall ThreatScore percentage (0-100)",
-    )
-
-    # Score improvement/degradation compared to previous snapshot
-    score_delta = models.DecimalField(
-        max_digits=5,
-        decimal_places=2,
-        null=True,
-        blank=True,
-        help_text="Score change compared to previous snapshot (positive = improvement)",
-    )
-
-    # Section breakdown stored as JSON
-    # Format: {"1. IAM": 85.5, "2. Attack Surface": 92.3, ...}
-    section_scores = models.JSONField(
-        default=dict,
-        blank=True,
-        help_text="ThreatScore breakdown by section",
-    )
-
-    # Critical requirements metadata stored as JSON
-    # Format: [{"requirement_id": "...", "risk_level": 5, "weight": 150, ...}, ...]
-    critical_requirements = models.JSONField(
-        default=list,
-        blank=True,
-        help_text="List of critical failed requirements (risk >= 4)",
-    )
-
-    # Summary statistics
-    total_requirements = models.IntegerField(
-        default=0,
-        help_text="Total number of requirements evaluated",
-    )
-
-    passed_requirements = models.IntegerField(
-        default=0,
-        help_text="Number of requirements with PASS status",
-    )
-
-    failed_requirements = models.IntegerField(
-        default=0,
-        help_text="Number of requirements with FAIL status",
-    )
-
-    manual_requirements = models.IntegerField(
-        default=0,
-        help_text="Number of requirements with MANUAL status",
-    )
-
-    total_findings = models.IntegerField(
-        default=0,
-        help_text="Total number of findings across all requirements",
-    )
-
-    passed_findings = models.IntegerField(
-        default=0,
-        help_text="Number of findings with PASS status",
-    )
-
-    failed_findings = models.IntegerField(
-        default=0,
-        help_text="Number of findings with FAIL status",
-    )
-
-    def __str__(self):
-        return f"ThreatScore {self.overall_score}% for scan {self.scan_id} ({self.inserted_at})"
-
-    class Meta(RowLevelSecurityProtectedModel.Meta):
-        db_table = "threatscore_snapshots"
-
-        constraints = [
-            RowLevelSecurityConstraint(
-                field="tenant_id",
-                name="rls_on_%(class)s",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ]
-
-        indexes = [
-            models.Index(
-                fields=["tenant_id", "scan_id"],
-                name="threatscore_snap_t_scan_idx",
-            ),
-            models.Index(
-                fields=["tenant_id", "provider_id"],
-                name="threatscore_snap_t_prov_idx",
-            ),
-            models.Index(
-                fields=["tenant_id", "inserted_at"],
-                name="threatscore_snap_t_time_idx",
-            ),
-        ]
-
-    class JSONAPIMeta:
-        resource_name = "threatscore-snapshots"
@@ -36,143 +36,6 @@ def _extract_task_example_from_components(components):
    }


-def fix_empty_id_fields(result, generator, request, public):  # noqa: F841
-    """
-    Fix empty id fields in JSON:API request schemas.
-    drf-spectacular-jsonapi sometimes generates empty id field definitions ({})
-    which cause validation errors in Mintlify and other OpenAPI validators.
-    """
-    if not isinstance(result, dict):
-        return result
-
-    components = result.get("components", {}) or {}
-    schemas = components.get("schemas", {}) or {}
-
-    for schema_name, schema in schemas.items():
-        if not isinstance(schema, dict):
-            continue
-
-        # Check if this is a JSON:API request schema with a data object
-        properties = schema.get("properties", {})
-        if not isinstance(properties, dict):
-            continue
-
-        data_prop = properties.get("data")
-        if not isinstance(data_prop, dict):
-            continue
-
-        data_properties = data_prop.get("properties", {})
-        if not isinstance(data_properties, dict):
-            continue
-
-        # Fix empty id field
-        id_field = data_properties.get("id")
-        if id_field == {} or (isinstance(id_field, dict) and not id_field):
-            data_properties["id"] = {
-                "type": "string",
-                "format": "uuid",
-                "description": "Unique identifier for this resource object.",
-            }
-
-    return result
-
-
-def convert_pattern_properties_to_additional(obj):
-    """
-    Recursively convert patternProperties to additionalProperties.
-    OpenAPI 3.0.x doesn't support patternProperties (only available in 3.1+).
-    """
-    if isinstance(obj, dict):
-        if "patternProperties" in obj:
-            # Get the pattern and its schema
-            pattern_props = obj.pop("patternProperties")
-            # Use the first pattern's schema as additionalProperties
-            if pattern_props:
-                first_pattern_schema = next(iter(pattern_props.values()))
-                obj["additionalProperties"] = first_pattern_schema
-
-        # Recursively process all nested objects
-        for key, value in obj.items():
-            obj[key] = convert_pattern_properties_to_additional(value)
-    elif isinstance(obj, list):
-        return [convert_pattern_properties_to_additional(item) for item in obj]
-
-    return obj
-
-
-def fix_pattern_properties(result, generator, request, public):  # noqa: F841
-    """
-    Convert patternProperties to additionalProperties for OpenAPI 3.0 compatibility.
-    patternProperties is only supported in OpenAPI 3.1+, but drf-spectacular
-    generates OpenAPI 3.0.x specs.
-    """
-    if not isinstance(result, dict):
-        return result
-
-    return convert_pattern_properties_to_additional(result)
-
-
-def fix_invalid_types(obj):
-    """
-    Recursively fix invalid type values in OpenAPI schemas.
-    Converts invalid types like "email" to proper OpenAPI format.
-    """
-    if isinstance(obj, dict):
-        # Fix invalid "type" values
-        if "type" in obj:
-            type_value = obj["type"]
-            if type_value == "email":
-                obj["type"] = "string"
-                obj["format"] = "email"
-            elif type_value == "url":
-                obj["type"] = "string"
-                obj["format"] = "uri"
-            elif type_value == "uuid":
-                obj["type"] = "string"
-                obj["format"] = "uuid"
-
-        # Recursively process all nested objects
-        for key, value in list(obj.items()):
-            obj[key] = fix_invalid_types(value)
-    elif isinstance(obj, list):
-        return [fix_invalid_types(item) for item in obj]
-
-    return obj
-
-
-def fix_type_formats(result, generator, request, public):  # noqa: F841
-    """
-    Fix invalid type values in OpenAPI schemas.
-    drf-spectacular sometimes generates invalid type values like "email"
-    instead of "type": "string" with "format": "email".
-    """
-    if not isinstance(result, dict):
-        return result
-
-    return fix_invalid_types(result)
-
-
-def add_api_servers(result, generator, request, public):  # noqa: F841
-    """
-    Add servers configuration to OpenAPI spec for Mintlify API playground.
-    This enables the "Try it out" feature in the documentation.
-    Only adds the production URL to ensure consistent documentation.
-    """
-    if not isinstance(result, dict):
-        return result
-
-    # Add servers array if not already present
-    if "servers" not in result:
-        result["servers"] = [
-            {
-                "url": "https://api.prowler.com",
-                "description": "Prowler Cloud API",
-            }
-        ]
-
-    return result
-
-
 def attach_task_202_examples(result, generator, request, public):  # noqa: F841
    if not isinstance(result, dict):
        return result
@@ -6,14 +6,7 @@ from django.dispatch import receiver
 from django_celery_results.backends.database import DatabaseBackend

 from api.db_utils import delete_related_daily_task
-from api.models import (
-    LighthouseProviderConfiguration,
-    LighthouseTenantConfiguration,
-    Membership,
-    Provider,
-    TenantAPIKey,
-    User,
-)
+from api.models import Membership, Provider, TenantAPIKey, User


 def create_task_result_on_publish(sender=None, headers=None, **kwargs):  # noqa: F841
@@ -63,33 +56,3 @@ def revoke_membership_api_keys(sender, instance, **kwargs):  # noqa: F841
    TenantAPIKey.objects.filter(
        entity=instance.user, tenant_id=instance.tenant.id
    ).update(revoked=True)
-
-
-@receiver(pre_delete, sender=LighthouseProviderConfiguration)
-def cleanup_lighthouse_defaults_before_delete(sender, instance, **kwargs):  # noqa: F841
-    """
-    Ensure tenant Lighthouse defaults do not reference a soon-to-be-deleted provider.
-
-    This runs for both per-instance deletes and queryset (bulk) deletes.
-    """
-    try:
-        tenant_cfg = LighthouseTenantConfiguration.objects.get(
-            tenant_id=instance.tenant_id
-        )
-    except LighthouseTenantConfiguration.DoesNotExist:
-        return
-
-    updated = False
-    defaults = tenant_cfg.default_models or {}
-
-    if instance.provider_type in defaults:
-        defaults.pop(instance.provider_type, None)
-        tenant_cfg.default_models = defaults
-        updated = True
-
-    if tenant_cfg.default_provider == instance.provider_type:
-        tenant_cfg.default_provider = ""
-        updated = True
-
-    if updated:
-        tenant_cfg.save()
@@ -20,11 +20,8 @@ from prowler.providers.aws.aws_provider import AwsProvider
 from prowler.providers.aws.lib.security_hub.security_hub import SecurityHubConnection
 from prowler.providers.azure.azure_provider import AzureProvider
 from prowler.providers.gcp.gcp_provider import GcpProvider
-from prowler.providers.github.github_provider import GithubProvider
 from prowler.providers.kubernetes.kubernetes_provider import KubernetesProvider
 from prowler.providers.m365.m365_provider import M365Provider
-from prowler.providers.mongodbatlas.mongodbatlas_provider import MongodbatlasProvider
-from prowler.providers.oraclecloud.oraclecloud_provider import OraclecloudProvider


 class TestMergeDicts:
@@ -111,9 +108,6 @@ class TestReturnProwlerProvider:
            (Provider.ProviderChoices.AZURE.value, AzureProvider),
            (Provider.ProviderChoices.KUBERNETES.value, KubernetesProvider),
            (Provider.ProviderChoices.M365.value, M365Provider),
-            (Provider.ProviderChoices.GITHUB.value, GithubProvider),
-            (Provider.ProviderChoices.MONGODBATLAS.value, MongodbatlasProvider),
-            (Provider.ProviderChoices.ORACLECLOUD.value, OraclecloudProvider),
        ],
    )
    def test_return_prowler_provider(self, provider_type, expected_provider):
@@ -209,14 +203,6 @@ class TestGetProwlerProviderKwargs:
                Provider.ProviderChoices.GITHUB.value,
                {"organizations": ["provider_uid"]},
            ),
-            (
-                Provider.ProviderChoices.ORACLECLOUD.value,
-                {},
-            ),
-            (
-                Provider.ProviderChoices.MONGODBATLAS.value,
-                {"atlas_organization_id": "provider_uid"},
-            ),
        ],
    )
    def test_get_prowler_provider_kwargs(self, provider_type, expected_extra_kwargs):
@@ -18,11 +18,8 @@ from prowler.providers.azure.azure_provider import AzureProvider
 from prowler.providers.common.models import Connection
 from prowler.providers.gcp.gcp_provider import GcpProvider
 from prowler.providers.github.github_provider import GithubProvider
-from prowler.providers.iac.iac_provider import IacProvider
 from prowler.providers.kubernetes.kubernetes_provider import KubernetesProvider
 from prowler.providers.m365.m365_provider import M365Provider
-from prowler.providers.mongodbatlas.mongodbatlas_provider import MongodbatlasProvider
-from prowler.providers.oraclecloud.oraclecloud_provider import OraclecloudProvider


 class CustomOAuth2Client(OAuth2Client):
@@ -68,11 +65,8 @@ def return_prowler_provider(
    | AzureProvider
    | GcpProvider
    | GithubProvider
-    | IacProvider
    | KubernetesProvider
    | M365Provider
-    | MongodbatlasProvider
-    | OraclecloudProvider
 ]:
    """Return the Prowler provider class based on the given provider type.

@@ -80,7 +74,7 @@ def return_prowler_provider(
        provider (Provider): The provider object containing the provider type and associated secrets.

    Returns:
-        AwsProvider | AzureProvider | GcpProvider | GithubProvider | IacProvider | KubernetesProvider | M365Provider | OraclecloudProvider | MongodbatlasProvider: The corresponding provider class.
+        AwsProvider | AzureProvider | GcpProvider | GithubProvider | KubernetesProvider | M365Provider: The corresponding provider class.

    Raises:
        ValueError: If the provider type specified in `provider.provider` is not supported.
@@ -98,12 +92,6 @@ def return_prowler_provider(
            prowler_provider = M365Provider
        case Provider.ProviderChoices.GITHUB.value:
            prowler_provider = GithubProvider
-        case Provider.ProviderChoices.MONGODBATLAS.value:
-            prowler_provider = MongodbatlasProvider
-        case Provider.ProviderChoices.IAC.value:
-            prowler_provider = IacProvider
-        case Provider.ProviderChoices.ORACLECLOUD.value:
-            prowler_provider = OraclecloudProvider
        case _:
            raise ValueError(f"Provider type {provider.provider} not supported")
    return prowler_provider
@@ -140,21 +128,6 @@ def get_prowler_provider_kwargs(
                **prowler_provider_kwargs,
                "organizations": [provider.uid],
            }
-    elif provider.provider == Provider.ProviderChoices.IAC.value:
-        # For IaC provider, uid contains the repository URL
-        # Extract the access token if present in the secret
-        prowler_provider_kwargs = {
-            "scan_repository_url": provider.uid,
-        }
-        if "access_token" in provider.secret.secret:
-            prowler_provider_kwargs["oauth_app_token"] = provider.secret.secret[
-                "access_token"
-            ]
-    elif provider.provider == Provider.ProviderChoices.MONGODBATLAS.value:
-        prowler_provider_kwargs = {
-            **prowler_provider_kwargs,
-            "atlas_organization_id": provider.uid,
-        }

    if mutelist_processor:
        mutelist_content = mutelist_processor.configuration.get("Mutelist", {})
@@ -172,11 +145,8 @@ def initialize_prowler_provider(
    | AzureProvider
    | GcpProvider
    | GithubProvider
-    | IacProvider
    | KubernetesProvider
    | M365Provider
-    | MongodbatlasProvider
-    | OraclecloudProvider
 ):
    """Initialize a Prowler provider instance based on the given provider type.

@@ -185,8 +155,8 @@ def initialize_prowler_provider(
        mutelist_processor (Processor): The mutelist processor object containing the mutelist configuration.

    Returns:
-        AwsProvider | AzureProvider | GcpProvider | GithubProvider | IacProvider | KubernetesProvider | M365Provider | OraclecloudProvider | MongodbatlasProvider: An instance of the corresponding provider class
-            (`AwsProvider`, `AzureProvider`, `GcpProvider`, `GithubProvider`, `IacProvider`, `KubernetesProvider`, `M365Provider`, `OraclecloudProvider` or `MongodbatlasProvider`) initialized with the
+        AwsProvider | AzureProvider | GcpProvider | GithubProvider | KubernetesProvider | M365Provider: An instance of the corresponding provider class
+            (`AwsProvider`, `AzureProvider`, `GcpProvider`, `GithubProvider`, `KubernetesProvider` or `M365Provider`) initialized with the
            provider's secrets.
    """
    prowler_provider = return_prowler_provider(provider)
@@ -210,23 +180,9 @@ def prowler_provider_connection_test(provider: Provider) -> Connection:
    except Provider.secret.RelatedObjectDoesNotExist as secret_error:
        return Connection(is_connected=False, error=secret_error)

-    # For IaC provider, construct the kwargs properly for test_connection
-    if provider.provider == Provider.ProviderChoices.IAC.value:
-        # Don't pass repository_url from secret, use scan_repository_url with the UID
-        iac_test_kwargs = {
-            "scan_repository_url": provider.uid,
-            "raise_on_exception": False,
-        }
-        # Add access_token if present in the secret
-        if "access_token" in prowler_provider_kwargs:
-            iac_test_kwargs["access_token"] = prowler_provider_kwargs["access_token"]
-        return prowler_provider.test_connection(**iac_test_kwargs)
-    else:
-        return prowler_provider.test_connection(
-            **prowler_provider_kwargs,
-            provider_id=provider.uid,
-            raise_on_exception=False,
-        )
+    return prowler_provider.test_connection(
+        **prowler_provider_kwargs, provider_id=provider.uid, raise_on_exception=False
+    )


 def prowler_integration_connection_test(integration: Integration) -> Connection:
@@ -12,24 +12,6 @@ from api.models import StateChoices, Task
 from api.v1.serializers import TaskSerializer


-class DisablePaginationMixin:
-    disable_pagination_query_param = "page[disable]"
-    disable_pagination_truthy_values = {"true"}
-
-    def should_disable_pagination(self) -> bool:
-        if not hasattr(self, "request"):
-            return False
-        value = self.request.query_params.get(self.disable_pagination_query_param)
-        if value is None:
-            return False
-        return str(value).lower() in self.disable_pagination_truthy_values
-
-    def paginate_queryset(self, queryset):
-        if self.should_disable_pagination():
-            return None
-        return super().paginate_queryset(queryset)
-
-
 class PaginateByPkMixin:
    """
    Mixin to paginate on a list of PKs (cheaper than heavy JOINs),
@@ -1,209 +0,0 @@
-import re
-
-from drf_spectacular.utils import extend_schema_field
-from rest_framework_json_api import serializers
-
-
-class OpenAICredentialsSerializer(serializers.Serializer):
-    api_key = serializers.CharField()
-
-    def validate_api_key(self, value: str) -> str:
-        pattern = r"^sk-[\w-]+$"
-        if not re.match(pattern, value or ""):
-            raise serializers.ValidationError("Invalid OpenAI API key format.")
-        return value
-
-    def to_internal_value(self, data):
-        """Check for unknown fields before DRF filters them out."""
-        if not isinstance(data, dict):
-            raise serializers.ValidationError(
-                {"non_field_errors": ["Credentials must be an object"]}
-            )
-
-        allowed_fields = set(self.fields.keys())
-        provided_fields = set(data.keys())
-        extra_fields = provided_fields - allowed_fields
-
-        if extra_fields:
-            raise serializers.ValidationError(
-                {
-                    "non_field_errors": [
-                        f"Unknown fields in credentials: {', '.join(sorted(extra_fields))}"
-                    ]
-                }
-            )
-
-        return super().to_internal_value(data)
-
-
-class BedrockCredentialsSerializer(serializers.Serializer):
-    """
-    Serializer for AWS Bedrock credentials validation.
-
-    Validates long-term AWS credentials (AKIA) and region format.
-    """
-
-    access_key_id = serializers.CharField()
-    secret_access_key = serializers.CharField()
-    region = serializers.CharField()
-
-    def validate_access_key_id(self, value: str) -> str:
-        """Validate AWS access key ID format (AKIA for long-term credentials)."""
-        pattern = r"^AKIA[0-9A-Z]{16}$"
-        if not re.match(pattern, value or ""):
-            raise serializers.ValidationError(
-                "Invalid AWS access key ID format. Must be AKIA followed by 16 alphanumeric characters."
-            )
-        return value
-
-    def validate_secret_access_key(self, value: str) -> str:
-        """Validate AWS secret access key format (40 base64 characters)."""
-        pattern = r"^[A-Za-z0-9/+=]{40}$"
-        if not re.match(pattern, value or ""):
-            raise serializers.ValidationError(
-                "Invalid AWS secret access key format. Must be 40 base64 characters."
-            )
-        return value
-
-    def validate_region(self, value: str) -> str:
-        """Validate AWS region format."""
-        pattern = r"^[a-z]{2}-[a-z]+-\d+$"
-        if not re.match(pattern, value or ""):
-            raise serializers.ValidationError(
-                "Invalid AWS region format. Expected format like 'us-east-1' or 'eu-west-2'."
-            )
-        return value
-
-    def to_internal_value(self, data):
-        """Check for unknown fields before DRF filters them out."""
-        if not isinstance(data, dict):
-            raise serializers.ValidationError(
-                {"non_field_errors": ["Credentials must be an object"]}
-            )
-
-        allowed_fields = set(self.fields.keys())
-        provided_fields = set(data.keys())
-        extra_fields = provided_fields - allowed_fields
-
-        if extra_fields:
-            raise serializers.ValidationError(
-                {
-                    "non_field_errors": [
-                        f"Unknown fields in credentials: {', '.join(sorted(extra_fields))}"
-                    ]
-                }
-            )
-
-        return super().to_internal_value(data)
-
-
-class BedrockCredentialsUpdateSerializer(BedrockCredentialsSerializer):
-    """
-    Serializer for AWS Bedrock credentials during UPDATE operations.
-
-    Inherits all validation logic from BedrockCredentialsSerializer but makes
-    all fields optional to support partial updates.
-    """
-
-    def __init__(self, *args, **kwargs):
-        super().__init__(*args, **kwargs)
-        # Make all fields optional for updates
-        for field in self.fields.values():
-            field.required = False
-
-
-class OpenAICompatibleCredentialsSerializer(serializers.Serializer):
-    """
-    Minimal serializer for OpenAI-compatible credentials.
-
-    Many OpenAI-compatible providers do not use the same key format as OpenAI.
-    We only require a non-empty API key string. Additional fields can be added later
-    without breaking existing configurations.
-    """
-
-    api_key = serializers.CharField()
-
-    def validate_api_key(self, value: str) -> str:
-        if not isinstance(value, str) or not value.strip():
-            raise serializers.ValidationError("API key is required.")
-        return value.strip()
-
-    def to_internal_value(self, data):
-        """Check for unknown fields before DRF filters them out."""
-        if not isinstance(data, dict):
-            raise serializers.ValidationError(
-                {"non_field_errors": ["Credentials must be an object"]}
-            )
-
-        allowed_fields = set(self.fields.keys())
-        provided_fields = set(data.keys())
-        extra_fields = provided_fields - allowed_fields
-
-        if extra_fields:
-            raise serializers.ValidationError(
-                {
-                    "non_field_errors": [
-                        f"Unknown fields in credentials: {', '.join(sorted(extra_fields))}"
-                    ]
-                }
-            )
-
-        return super().to_internal_value(data)
-
-
-@extend_schema_field(
-    {
-        "oneOf": [
-            {
-                "type": "object",
-                "title": "OpenAI Credentials",
-                "properties": {
-                    "api_key": {
-                        "type": "string",
-                        "description": "OpenAI API key. Must start with 'sk-' followed by alphanumeric characters, "
-                        "hyphens, or underscores.",
-                        "pattern": "^sk-[\\w-]+$",
-                    }
-                },
-                "required": ["api_key"],
-            },
-            {
-                "type": "object",
-                "title": "AWS Bedrock Credentials",
-                "properties": {
-                    "access_key_id": {
-                        "type": "string",
-                        "description": "AWS access key ID.",
-                        "pattern": "^AKIA[0-9A-Z]{16}$",
-                    },
-                    "secret_access_key": {
-                        "type": "string",
-                        "description": "AWS secret access key.",
-                        "pattern": "^[A-Za-z0-9/+=]{40}$",
-                    },
-                    "region": {
-                        "type": "string",
-                        "description": "AWS region identifier where Bedrock is available. Examples: us-east-1, "
-                        "us-west-2, eu-west-1, ap-northeast-1.",
-                        "pattern": "^[a-z]{2}-[a-z]+-\\d+$",
-                    },
-                },
-                "required": ["access_key_id", "secret_access_key", "region"],
-            },
-            {
-                "type": "object",
-                "title": "OpenAI Compatible Credentials",
-                "properties": {
-                    "api_key": {
-                        "type": "string",
-                        "description": "API key for OpenAI-compatible provider. The format varies by provider. "
-                        "Note: The 'base_url' field (separate from credentials) is required when using this provider type.",
-                    }
-                },
-                "required": ["api_key"],
-            },
-        ]
-    }
-)
-class LighthouseCredentialsField(serializers.JSONField):
-    pass
@@ -239,71 +239,6 @@ from rest_framework_json_api import serializers
                },
                "required": ["github_app_id", "github_app_key"],
            },
-            {
-                "type": "object",
-                "title": "IaC Repository Credentials",
-                "properties": {
-                    "repository_url": {
-                        "type": "string",
-                        "description": "Repository URL to scan for IaC files.",
-                    },
-                    "access_token": {
-                        "type": "string",
-                        "description": "Optional access token for private repositories.",
-                    },
-                },
-                "required": ["repository_url"],
-            },
-            {
-                "type": "object",
-                "title": "Oracle Cloud Infrastructure (OCI) API Key Credentials",
-                "properties": {
-                    "user": {
-                        "type": "string",
-                        "description": "The OCID of the user to authenticate with.",
-                    },
-                    "fingerprint": {
-                        "type": "string",
-                        "description": "The fingerprint of the API signing key.",
-                    },
-                    "key_file": {
-                        "type": "string",
-                        "description": "The path to the private key file for API signing. Either key_file or key_content must be provided.",
-                    },
-                    "key_content": {
-                        "type": "string",
-                        "description": "The content of the private key for API signing (base64 encoded). Either key_file or key_content must be provided.",
-                    },
-                    "tenancy": {
-                        "type": "string",
-                        "description": "The OCID of the tenancy.",
-                    },
-                    "region": {
-                        "type": "string",
-                        "description": "The OCI region identifier (e.g., us-ashburn-1, us-phoenix-1).",
-                    },
-                    "pass_phrase": {
-                        "type": "string",
-                        "description": "The passphrase for the private key, if encrypted.",
-                    },
-                },
-                "required": ["user", "fingerprint", "tenancy", "region"],
-            },
-            {
-                "type": "object",
-                "title": "MongoDB Atlas API Key",
-                "properties": {
-                    "atlas_public_key": {
-                        "type": "string",
-                        "description": "MongoDB Atlas API public key.",
-                    },
-                    "atlas_private_key": {
-                        "type": "string",
-                        "description": "MongoDB Atlas API private key.",
-                    },
-                },
-                "required": ["atlas_public_key", "atlas_private_key"],
-            },
        ]
    }
 )
@@ -6,10 +6,8 @@ from django.conf import settings
 from django.contrib.auth import authenticate
 from django.contrib.auth.models import update_last_login
 from django.contrib.auth.password_validation import validate_password
-from django.db import IntegrityError
 from drf_spectacular.utils import extend_schema_field
 from jwt.exceptions import InvalidKeyError
-from rest_framework.reverse import reverse
 from rest_framework.validators import UniqueTogetherValidator
 from rest_framework_json_api import serializers
 from rest_framework_json_api.relations import SerializerMethodResourceRelatedField
@@ -27,11 +25,7 @@ from api.models import (
    Invitation,
    InvitationRoleRelationship,
    LighthouseConfiguration,
-    LighthouseProviderConfiguration,
-    LighthouseProviderModels,
-    LighthouseTenantConfiguration,
    Membership,
-    MuteRule,
    Processor,
    Provider,
    ProviderGroup,
@@ -47,7 +41,6 @@ from api.models import (
    StatusChoices,
    Task,
    TenantAPIKey,
-    ThreatScoreSnapshot,
    User,
    UserRoleRelationship,
 )
@@ -61,13 +54,6 @@ from api.v1.serializer_utils.integrations import (
    S3ConfigSerializer,
    SecurityHubConfigSerializer,
 )
-from api.v1.serializer_utils.lighthouse import (
-    BedrockCredentialsSerializer,
-    BedrockCredentialsUpdateSerializer,
-    LighthouseCredentialsField,
-    OpenAICompatibleCredentialsSerializer,
-    OpenAICredentialsSerializer,
-)
 from api.v1.serializer_utils.processors import ProcessorConfigField
 from api.v1.serializer_utils.providers import ProviderSecretField
 from prowler.lib.mutelist.mutelist import Mutelist
@@ -1363,16 +1349,10 @@ class BaseWriteProviderSecretSerializer(BaseWriteSerializer):
                serializer = GCPProviderSecret(data=secret)
            elif provider_type == Provider.ProviderChoices.GITHUB.value:
                serializer = GithubProviderSecret(data=secret)
-            elif provider_type == Provider.ProviderChoices.IAC.value:
-                serializer = IacProviderSecret(data=secret)
            elif provider_type == Provider.ProviderChoices.KUBERNETES.value:
                serializer = KubernetesProviderSecret(data=secret)
            elif provider_type == Provider.ProviderChoices.M365.value:
                serializer = M365ProviderSecret(data=secret)
-            elif provider_type == Provider.ProviderChoices.ORACLECLOUD.value:
-                serializer = OracleCloudProviderSecret(data=secret)
-            elif provider_type == Provider.ProviderChoices.MONGODBATLAS.value:
-                serializer = MongoDBAtlasProviderSecret(data=secret)
            else:
                raise serializers.ValidationError(
                    {"provider": f"Provider type not supported {provider_type}"}
@@ -1469,14 +1449,6 @@ class GCPServiceAccountProviderSecret(serializers.Serializer):
        resource_name = "provider-secrets"


-class MongoDBAtlasProviderSecret(serializers.Serializer):
-    atlas_public_key = serializers.CharField()
-    atlas_private_key = serializers.CharField()
-
-    class Meta:
-        resource_name = "provider-secrets"
-
-
 class KubernetesProviderSecret(serializers.Serializer):
    kubeconfig_content = serializers.CharField()

@@ -1494,27 +1466,6 @@ class GithubProviderSecret(serializers.Serializer):
        resource_name = "provider-secrets"


-class IacProviderSecret(serializers.Serializer):
-    repository_url = serializers.CharField()
-    access_token = serializers.CharField(required=False)
-
-    class Meta:
-        resource_name = "provider-secrets"
-
-
-class OracleCloudProviderSecret(serializers.Serializer):
-    user = serializers.CharField()
-    fingerprint = serializers.CharField()
-    key_file = serializers.CharField(required=False)
-    key_content = serializers.CharField(required=False)
-    tenancy = serializers.CharField()
-    region = serializers.CharField()
-    pass_phrase = serializers.CharField(required=False)
-
-    class Meta:
-        resource_name = "provider-secrets"
-
-
 class AWSRoleAssumptionProviderSecret(serializers.Serializer):
    role_arn = serializers.CharField()
    external_id = serializers.CharField()
@@ -2148,17 +2099,6 @@ class OverviewProviderSerializer(serializers.Serializer):
        }


-class OverviewProviderCountSerializer(serializers.Serializer):
-    id = serializers.CharField(source="provider")
-    count = serializers.IntegerField()
-
-    class JSONAPIMeta:
-        resource_name = "providers-count-overview"
-
-    def get_root_meta(self, _resource, _many):
-        return {"version": "v1"}
-
-
 class OverviewFindingSerializer(serializers.Serializer):
    id = serializers.CharField(default="n/a")
    new = serializers.IntegerField()
@@ -2810,16 +2750,6 @@ class LighthouseConfigCreateSerializer(RLSSerializer, BaseWriteSerializer):
            "updated_at": {"read_only": True},
        }

-    def validate_temperature(self, value):
-        if not 0 <= value <= 1:
-            raise ValidationError("Temperature must be between 0 and 1.")
-        return value
-
-    def validate_max_tokens(self, value):
-        if not 500 <= value <= 5000:
-            raise ValidationError("Max tokens must be between 500 and 5000.")
-        return value
-
    def validate(self, attrs):
        tenant_id = self.context.get("request").tenant_id
        if LighthouseConfiguration.objects.filter(tenant_id=tenant_id).exists():
@@ -2828,11 +2758,6 @@ class LighthouseConfigCreateSerializer(RLSSerializer, BaseWriteSerializer):
                    "tenant_id": "Lighthouse configuration already exists for this tenant."
                }
            )
-        api_key = attrs.get("api_key")
-        if api_key is not None:
-            OpenAICredentialsSerializer(data={"api_key": api_key}).is_valid(
-                raise_exception=True
-            )
        return super().validate(attrs)

    def create(self, validated_data):
@@ -2877,24 +2802,6 @@ class LighthouseConfigUpdateSerializer(BaseWriteSerializer):
            "max_tokens": {"required": False},
        }

-    def validate_temperature(self, value):
-        if not 0 <= value <= 1:
-            raise ValidationError("Temperature must be between 0 and 1.")
-        return value
-
-    def validate_max_tokens(self, value):
-        if not 500 <= value <= 5000:
-            raise ValidationError("Max tokens must be between 500 and 5000.")
-        return value
-
-    def validate(self, attrs):
-        api_key = attrs.get("api_key", None)
-        if api_key is not None:
-            OpenAICredentialsSerializer(data={"api_key": api_key}).is_valid(
-                raise_exception=True
-            )
-        return super().validate(attrs)
-
    def update(self, instance, validated_data):
        api_key = validated_data.pop("api_key", None)
        instance = super().update(instance, validated_data)
@@ -3024,667 +2931,3 @@ class TenantApiKeyUpdateSerializer(RLSSerializer, BaseWriteSerializer):
        ):
            raise ValidationError("An API key with this name already exists.")
        return value
-
-
-# Lighthouse: Provider configurations
-
-
-class LighthouseProviderConfigSerializer(RLSSerializer):
-    """
-    Read serializer for LighthouseProviderConfiguration.
-    """
-
-    # Decrypted credentials are only returned in to_representation when requested
-    credentials = serializers.JSONField(required=False, read_only=True)
-
-    class Meta:
-        model = LighthouseProviderConfiguration
-        fields = [
-            "id",
-            "inserted_at",
-            "updated_at",
-            "provider_type",
-            "base_url",
-            "is_active",
-            "credentials",
-            "url",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "inserted_at": {"read_only": True},
-            "updated_at": {"read_only": True},
-            "is_active": {"read_only": True},
-            "url": {"read_only": True, "view_name": "lighthouse-providers-detail"},
-        }
-
-    class JSONAPIMeta:
-        resource_name = "lighthouse-providers"
-
-    def to_representation(self, instance):
-        data = super().to_representation(instance)
-        # Support JSON:API fields filter: fields[lighthouse-providers]=credentials,base_url
-        fields_param = self.context.get("request", None) and self.context[
-            "request"
-        ].query_params.get("fields[lighthouse-providers]", "")
-
-        creds = instance.credentials_decoded
-
-        requested_fields = (
-            [f.strip() for f in fields_param.split(",")] if fields_param else []
-        )
-
-        if "credentials" in requested_fields:
-            # Return full decrypted credentials JSON
-            data["credentials"] = creds
-        else:
-            # Return masked credentials by default
-            def mask_value(value):
-                if isinstance(value, str):
-                    return "*" * len(value)
-                if isinstance(value, dict):
-                    return {k: mask_value(v) for k, v in value.items()}
-                if isinstance(value, list):
-                    return [mask_value(v) for v in value]
-                return value
-
-            # Always return masked credentials, even if creds is None
-            if creds is not None:
-                data["credentials"] = mask_value(creds)
-            else:
-                # If credentials_decoded returns None, return None for credentials field
-                data["credentials"] = None
-
-        return data
-
-
-class LighthouseProviderConfigCreateSerializer(RLSSerializer, BaseWriteSerializer):
-    """
-    Create serializer for LighthouseProviderConfiguration.
-    Accepts credentials as JSON; stored encrypted via credentials_decoded.
-    """
-
-    credentials = LighthouseCredentialsField(write_only=True, required=True)
-    base_url = serializers.URLField(
-        required=False,
-        allow_null=True,
-        help_text="Base URL for the LLM provider API. Required for 'openai_compatible' provider type.",
-    )
-
-    class Meta:
-        model = LighthouseProviderConfiguration
-        fields = [
-            "provider_type",
-            "base_url",
-            "credentials",
-            "is_active",
-        ]
-        extra_kwargs = {
-            "is_active": {"required": False},
-            "provider_type": {
-                "help_text": "LLM provider type. Determines which credential format to use. "
-                "See 'credentials' field documentation for provider-specific requirements."
-            },
-        }
-
-    def create(self, validated_data):
-        credentials = validated_data.pop("credentials")
-
-        instance = LighthouseProviderConfiguration(**validated_data)
-        instance.tenant_id = self.context.get("tenant_id")
-        instance.credentials_decoded = credentials
-
-        try:
-            instance.save()
-            return instance
-        except IntegrityError:
-            raise ValidationError(
-                {
-                    "provider_type": "Configuration for this provider already exists for the tenant."
-                }
-            )
-
-    def validate(self, attrs):
-        provider_type = attrs.get("provider_type")
-        credentials = attrs.get("credentials") or {}
-        base_url = attrs.get("base_url")
-
-        if provider_type == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI:
-            try:
-                OpenAICredentialsSerializer(data=credentials).is_valid(
-                    raise_exception=True
-                )
-            except ValidationError as e:
-                details = e.detail.copy()
-                for key, value in details.items():
-                    e.detail[f"credentials/{key}"] = value
-                    del e.detail[key]
-                raise e
-        elif (
-            provider_type == LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK
-        ):
-            try:
-                BedrockCredentialsSerializer(data=credentials).is_valid(
-                    raise_exception=True
-                )
-            except ValidationError as e:
-                details = e.detail.copy()
-                for key, value in details.items():
-                    e.detail[f"credentials/{key}"] = value
-                    del e.detail[key]
-                raise e
-        elif (
-            provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE
-        ):
-            if not base_url:
-                raise ValidationError({"base_url": "Base URL is required."})
-            try:
-                OpenAICompatibleCredentialsSerializer(data=credentials).is_valid(
-                    raise_exception=True
-                )
-            except ValidationError as e:
-                details = e.detail.copy()
-                for key, value in details.items():
-                    e.detail[f"credentials/{key}"] = value
-                    del e.detail[key]
-                raise e
-
-        return super().validate(attrs)
-
-
-class LighthouseProviderConfigUpdateSerializer(BaseWriteSerializer):
-    """
-    Update serializer for LighthouseProviderConfiguration.
-    """
-
-    credentials = LighthouseCredentialsField(write_only=True, required=False)
-    base_url = serializers.URLField(
-        required=False,
-        allow_null=True,
-        help_text="Base URL for the LLM provider API. Required for 'openai_compatible' provider type.",
-    )
-
-    class Meta:
-        model = LighthouseProviderConfiguration
-        fields = [
-            "id",
-            "provider_type",
-            "base_url",
-            "credentials",
-            "is_active",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "provider_type": {"read_only": True},
-            "is_active": {"required": False},
-        }
-
-    def update(self, instance, validated_data):
-        credentials = validated_data.pop("credentials", None)
-
-        for attr, value in validated_data.items():
-            setattr(instance, attr, value)
-
-        if credentials is not None:
-            # Merge partial credentials with existing ones
-            # New values overwrite existing ones, but unspecified fields are preserved
-            existing_credentials = instance.credentials_decoded or {}
-            merged_credentials = {**existing_credentials, **credentials}
-            instance.credentials_decoded = merged_credentials
-
-        instance.save()
-        return instance
-
-    def validate(self, attrs):
-        provider_type = getattr(self.instance, "provider_type", None)
-        credentials = attrs.get("credentials", None)
-        base_url = attrs.get("base_url", None)
-
-        if (
-            credentials is not None
-            and provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI
-        ):
-            try:
-                OpenAICredentialsSerializer(data=credentials).is_valid(
-                    raise_exception=True
-                )
-            except ValidationError as e:
-                details = e.detail.copy()
-                for key, value in details.items():
-                    e.detail[f"credentials/{key}"] = value
-                    del e.detail[key]
-                raise e
-        elif (
-            credentials is not None
-            and provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK
-        ):
-            try:
-                BedrockCredentialsUpdateSerializer(data=credentials).is_valid(
-                    raise_exception=True
-                )
-            except ValidationError as e:
-                details = e.detail.copy()
-                for key, value in details.items():
-                    e.detail[f"credentials/{key}"] = value
-                    del e.detail[key]
-                raise e
-        elif (
-            credentials is not None
-            and provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE
-        ):
-            if base_url is None:
-                pass
-            elif not base_url:
-                raise ValidationError({"base_url": "Base URL cannot be empty."})
-            try:
-                OpenAICompatibleCredentialsSerializer(data=credentials).is_valid(
-                    raise_exception=True
-                )
-            except ValidationError as e:
-                details = e.detail.copy()
-                for key, value in details.items():
-                    e.detail[f"credentials/{key}"] = value
-                    del e.detail[key]
-                raise e
-
-        return super().validate(attrs)
-
-
-# Lighthouse: Tenant configuration
-
-
-class LighthouseTenantConfigSerializer(RLSSerializer):
-    """
-    Read serializer for LighthouseTenantConfiguration.
-    """
-
-    # Build singleton URL without pk
-    url = serializers.SerializerMethodField()
-
-    def get_url(self, obj):
-        request = self.context.get("request")
-        return reverse("lighthouse-configurations", request=request)
-
-    class Meta:
-        model = LighthouseTenantConfiguration
-        fields = [
-            "id",
-            "inserted_at",
-            "updated_at",
-            "business_context",
-            "default_provider",
-            "default_models",
-            "url",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "inserted_at": {"read_only": True},
-            "updated_at": {"read_only": True},
-            "url": {"read_only": True},
-        }
-
-
-class LighthouseTenantConfigUpdateSerializer(BaseWriteSerializer):
-    class Meta:
-        model = LighthouseTenantConfiguration
-        fields = [
-            "id",
-            "business_context",
-            "default_provider",
-            "default_models",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-        }
-
-    def validate(self, attrs):
-        request = self.context.get("request")
-        tenant_id = self.context.get("tenant_id") or (
-            getattr(request, "tenant_id", None) if request else None
-        )
-
-        default_provider = attrs.get(
-            "default_provider", getattr(self.instance, "default_provider", "")
-        )
-        default_models = attrs.get(
-            "default_models", getattr(self.instance, "default_models", {})
-        )
-
-        if default_provider:
-            supported = set(LighthouseProviderConfiguration.LLMProviderChoices.values)
-            if default_provider not in supported:
-                raise ValidationError(
-                    {"default_provider": f"Unsupported provider '{default_provider}'."}
-                )
-            if not LighthouseProviderConfiguration.objects.filter(
-                tenant_id=tenant_id, provider_type=default_provider, is_active=True
-            ).exists():
-                raise ValidationError(
-                    {
-                        "default_provider": f"No active configuration found for '{default_provider}'."
-                    }
-                )
-
-        if default_models is not None and not isinstance(default_models, dict):
-            raise ValidationError(
-                {"default_models": "Must be an object mapping provider -> model_id."}
-            )
-
-        for provider_type, model_id in (default_models or {}).items():
-            provider_cfg = LighthouseProviderConfiguration.objects.filter(
-                tenant_id=tenant_id, provider_type=provider_type, is_active=True
-            ).first()
-            if not provider_cfg:
-                raise ValidationError(
-                    {
-                        "default_models": f"No active configuration for provider '{provider_type}'."
-                    }
-                )
-            if not LighthouseProviderModels.objects.filter(
-                tenant_id=tenant_id,
-                provider_configuration=provider_cfg,
-                model_id=model_id,
-            ).exists():
-                raise ValidationError(
-                    {
-                        "default_models": f"Invalid model '{model_id}' for provider '{provider_type}'."
-                    }
-                )
-
-        return super().validate(attrs)
-
-
-# Lighthouse: Provider models
-
-
-class LighthouseProviderModelsSerializer(RLSSerializer):
-    """
-    Read serializer for LighthouseProviderModels.
-    """
-
-    provider_configuration = serializers.ResourceRelatedField(read_only=True)
-
-    class Meta:
-        model = LighthouseProviderModels
-        fields = [
-            "id",
-            "inserted_at",
-            "updated_at",
-            "provider_configuration",
-            "model_id",
-            "model_name",
-            "default_parameters",
-            "url",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "inserted_at": {"read_only": True},
-            "updated_at": {"read_only": True},
-            "url": {"read_only": True, "view_name": "lighthouse-models-detail"},
-        }
-
-
-class LighthouseProviderModelsCreateSerializer(RLSSerializer, BaseWriteSerializer):
-    provider_configuration = serializers.ResourceRelatedField(
-        queryset=LighthouseProviderConfiguration.objects.all()
-    )
-
-    class Meta:
-        model = LighthouseProviderModels
-        fields = [
-            "provider_configuration",
-            "model_id",
-            "default_parameters",
-        ]
-        extra_kwargs = {
-            "default_parameters": {"required": False},
-        }
-
-
-class LighthouseProviderModelsUpdateSerializer(BaseWriteSerializer):
-    class Meta:
-        model = LighthouseProviderModels
-        fields = [
-            "id",
-            "default_parameters",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-        }
-
-
-# Mute Rules
-
-
-class MuteRuleSerializer(RLSSerializer):
-    """
-    Serializer for reading MuteRule instances.
-    """
-
-    finding_uids = serializers.ListField(
-        child=serializers.CharField(),
-        read_only=True,
-        help_text="List of finding UIDs that are muted by this rule",
-    )
-
-    class Meta:
-        model = MuteRule
-        fields = [
-            "id",
-            "inserted_at",
-            "updated_at",
-            "name",
-            "reason",
-            "enabled",
-            "created_by",
-            "finding_uids",
-        ]
-
-    included_serializers = {
-        "created_by": "api.v1.serializers.UserIncludeSerializer",
-    }
-
-
-class MuteRuleCreateSerializer(RLSSerializer, BaseWriteSerializer):
-    """
-    Serializer for creating new MuteRule instances.
-
-    Accepts finding_ids in the request, converts them to UIDs, and stores in finding_uids.
-    """
-
-    finding_ids = serializers.ListField(
-        child=serializers.UUIDField(),
-        write_only=True,
-        required=True,
-        help_text="List of Finding IDs to mute (will be converted to UIDs)",
-    )
-    finding_uids = serializers.ListField(
-        child=serializers.CharField(),
-        read_only=True,
-        help_text="List of finding UIDs that are muted by this rule",
-    )
-
-    class Meta:
-        model = MuteRule
-        fields = [
-            "id",
-            "inserted_at",
-            "updated_at",
-            "name",
-            "reason",
-            "enabled",
-            "created_by",
-            "finding_ids",
-            "finding_uids",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "inserted_at": {"read_only": True},
-            "updated_at": {"read_only": True},
-            "enabled": {"read_only": True},
-            "created_by": {"read_only": True},
-        }
-
-    def validate_name(self, value):
-        """Validate that the name is unique within the tenant."""
-        tenant_id = self.context.get("tenant_id")
-        if MuteRule.objects.filter(tenant_id=tenant_id, name=value).exists():
-            raise ValidationError("A mute rule with this name already exists.")
-        return value
-
-    def validate_finding_ids(self, value):
-        """Validate that all finding IDs exist and belong to the tenant."""
-        if not value:
-            raise ValidationError("At least one finding_id must be provided.")
-
-        tenant_id = self.context.get("tenant_id")
-
-        # Check that all findings exist and belong to this tenant
-        findings = Finding.all_objects.filter(tenant_id=tenant_id, id__in=value)
-        found_ids = set(findings.values_list("id", flat=True))
-        provided_ids = set(value)
-
-        missing_ids = provided_ids - found_ids
-        if missing_ids:
-            raise ValidationError(
-                f"The following finding IDs do not exist or do not belong to your tenant: {missing_ids}"
-            )
-
-        return value
-
-    def validate(self, data):
-        """Validate the entire mute rule, including overlap detection."""
-        data = super().validate(data)
-
-        tenant_id = self.context.get("tenant_id")
-        finding_ids = data.get("finding_ids", [])
-
-        if not finding_ids:
-            return data
-
-        # Convert finding IDs to UIDs (deduplicate in case multiple findings have same UID)
-        findings = Finding.all_objects.filter(id__in=finding_ids, tenant_id=tenant_id)
-        finding_uids = list(set(findings.values_list("uid", flat=True)))
-
-        # Check for overlaps with existing enabled rules
-        existing_rules = MuteRule.objects.filter(tenant_id=tenant_id, enabled=True)
-
-        for rule in existing_rules:
-            overlap = set(finding_uids) & set(rule.finding_uids)
-            if overlap:
-                raise ConflictException(
-                    detail=f"The following finding UIDs are already muted by rule '{rule.name}': {overlap}"
-                )
-
-        # Store finding_uids in validated_data for create
-        data["finding_uids"] = finding_uids
-
-        return data
-
-    def create(self, validated_data):
-        """Create a new mute rule and set created_by."""
-        # Remove finding_ids from validated_data (we've already converted to finding_uids)
-        validated_data.pop("finding_ids", None)
-
-        # Set created_by to the current user
-        request = self.context.get("request")
-        if request and hasattr(request, "user"):
-            validated_data["created_by"] = request.user
-
-        return super().create(validated_data)
-
-
-class MuteRuleUpdateSerializer(BaseWriteSerializer):
-    """
-    Serializer for updating MuteRule instances.
-    """
-
-    class Meta:
-        model = MuteRule
-        fields = [
-            "id",
-            "name",
-            "reason",
-            "enabled",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "name": {"required": False},
-            "reason": {"required": False},
-            "enabled": {"required": False},
-        }
-
-    def validate_name(self, value):
-        """Validate that the name is unique within the tenant, excluding current instance."""
-        tenant_id = self.context.get("tenant_id")
-        if (
-            MuteRule.objects.filter(tenant_id=tenant_id, name=value)
-            .exclude(id=self.instance.id)
-            .exists()
-        ):
-            raise ValidationError("A mute rule with this name already exists.")
-        return value
-
-
-# ThreatScore Snapshots
-
-
-class ThreatScoreSnapshotSerializer(RLSSerializer):
-    """
-    Serializer for ThreatScore snapshots.
-    Read-only serializer for retrieving historical ThreatScore metrics.
-    """
-
-    id = serializers.SerializerMethodField()
-
-    class Meta:
-        model = ThreatScoreSnapshot
-        fields = [
-            "id",
-            "inserted_at",
-            "scan",
-            "provider",
-            "compliance_id",
-            "overall_score",
-            "score_delta",
-            "section_scores",
-            "critical_requirements",
-            "total_requirements",
-            "passed_requirements",
-            "failed_requirements",
-            "manual_requirements",
-            "total_findings",
-            "passed_findings",
-            "failed_findings",
-        ]
-        extra_kwargs = {
-            "id": {"read_only": True},
-            "inserted_at": {"read_only": True},
-            "scan": {"read_only": True},
-            "provider": {"read_only": True},
-            "compliance_id": {"read_only": True},
-            "overall_score": {"read_only": True},
-            "score_delta": {"read_only": True},
-            "section_scores": {"read_only": True},
-            "critical_requirements": {"read_only": True},
-            "total_requirements": {"read_only": True},
-            "passed_requirements": {"read_only": True},
-            "failed_requirements": {"read_only": True},
-            "manual_requirements": {"read_only": True},
-            "total_findings": {"read_only": True},
-            "passed_findings": {"read_only": True},
-            "failed_findings": {"read_only": True},
-        }
-
-    included_serializers = {
-        "scan": "api.v1.serializers.ScanIncludeSerializer",
-        "provider": "api.v1.serializers.ProviderIncludeSerializer",
-    }
-
-    def get_id(self, obj):
-        if getattr(obj, "_aggregated", False):
-            return "n/a"
-        return str(obj.id)
@@ -17,11 +17,7 @@ from api.v1.views import (
    InvitationAcceptViewSet,
    InvitationViewSet,
    LighthouseConfigViewSet,
-    LighthouseProviderConfigViewSet,
-    LighthouseProviderModelsViewSet,
-    LighthouseTenantConfigViewSet,
    MembershipViewSet,
-    MuteRuleViewSet,
    OverviewViewSet,
    ProcessorViewSet,
    ProviderGroupProvidersRelationshipView,
@@ -38,12 +34,12 @@ from api.v1.views import (
    ScheduleViewSet,
    SchemaView,
    TaskViewSet,
-    TenantApiKeyViewSet,
    TenantFinishACSView,
    TenantMembersViewSet,
    TenantViewSet,
    UserRoleRelationshipView,
    UserViewSet,
+    TenantApiKeyViewSet,
 )

 router = routers.DefaultRouter(trailing_slash=False)
@@ -71,17 +67,6 @@ router.register(
    basename="lighthouseconfiguration",
 )
 router.register(r"api-keys", TenantApiKeyViewSet, basename="api-key")
-router.register(
-    r"lighthouse/providers",
-    LighthouseProviderConfigViewSet,
-    basename="lighthouse-providers",
-)
-router.register(
-    r"lighthouse/models",
-    LighthouseProviderModelsViewSet,
-    basename="lighthouse-models",
-)
-router.register(r"mute-rules", MuteRuleViewSet, basename="mute-rule")

 tenants_router = routers.NestedSimpleRouter(router, r"tenants", lookup="tenant")
 tenants_router.register(
@@ -152,13 +137,6 @@ urlpatterns = [
        ),
        name="provider_group-providers-relationship",
    ),
-    path(
-        "lighthouse/configuration",
-        LighthouseTenantConfigViewSet.as_view(
-            {"get": "list", "patch": "partial_update"}
-        ),
-        name="lighthouse-configurations",
-    ),
    # API endpoint to start SAML SSO flow
    path(
        "auth/saml/initiate/", SAMLInitiateAPIView.as_view(), name="api_saml_initiate"
@@ -1,12 +1,8 @@
 import fnmatch
 import glob
-import json
 import logging
 import os
-from collections import defaultdict
-from copy import deepcopy
 from datetime import datetime, timedelta, timezone
-from decimal import ROUND_HALF_UP, Decimal, InvalidOperation
 from urllib.parse import urljoin

 import sentry_sdk
@@ -27,23 +23,9 @@ from django.conf import settings as django_settings
 from django.contrib.postgres.aggregates import ArrayAgg
 from django.contrib.postgres.search import SearchQuery
 from django.db import transaction
-from django.db.models import (
-    Case,
-    Count,
-    DecimalField,
-    ExpressionWrapper,
-    F,
-    IntegerField,
-    Max,
-    Prefetch,
-    Q,
-    Subquery,
-    Sum,
-    Value,
-    When,
-)
+from django.db.models import Count, F, Prefetch, Q, Subquery, Sum
 from django.db.models.functions import Coalesce
-from django.http import HttpResponse, QueryDict
+from django.http import HttpResponse
 from django.shortcuts import redirect
 from django.urls import reverse
 from django.utils.dateparse import parse_date
@@ -78,14 +60,11 @@ from tasks.tasks import (
    backfill_scan_resource_summaries_task,
    check_integration_connection_task,
    check_lighthouse_connection_task,
-    check_lighthouse_provider_connection_task,
    check_provider_connection_task,
    delete_provider_task,
    delete_tenant_task,
    jira_integration_task,
-    mute_historical_findings_task,
    perform_scan_task,
-    refresh_lighthouse_provider_models_task,
 )

 from api.base_views import BaseRLSViewSet, BaseTenantViewset, BaseUserViewset
@@ -105,10 +84,7 @@ from api.filters import (
    InvitationFilter,
    LatestFindingFilter,
    LatestResourceFilter,
-    LighthouseProviderConfigFilter,
-    LighthouseProviderModelsFilter,
    MembershipFilter,
-    MuteRuleFilter,
    ProcessorFilter,
    ProviderFilter,
    ProviderGroupFilter,
@@ -122,7 +98,6 @@ from api.filters import (
    TaskFilter,
    TenantApiKeyFilter,
    TenantFilter,
-    ThreatScoreSnapshotFilter,
    UserFilter,
 )
 from api.models import (
@@ -131,11 +106,7 @@ from api.models import (
    Integration,
    Invitation,
    LighthouseConfiguration,
-    LighthouseProviderConfiguration,
-    LighthouseProviderModels,
-    LighthouseTenantConfiguration,
    Membership,
-    MuteRule,
    Processor,
    Provider,
    ProviderGroup,
@@ -156,7 +127,6 @@ from api.models import (
    StateChoices,
    Task,
    TenantAPIKey,
-    ThreatScoreSnapshot,
    User,
    UserRoleRelationship,
 )
@@ -169,7 +139,7 @@ from api.utils import (
    validate_invitation,
 )
 from api.uuid_utils import datetime_to_uuid7, uuid7_start
-from api.v1.mixins import DisablePaginationMixin, PaginateByPkMixin, TaskManagementMixin
+from api.v1.mixins import PaginateByPkMixin, TaskManagementMixin
 from api.v1.serializers import (
    ComplianceOverviewAttributesSerializer,
    ComplianceOverviewDetailSerializer,
@@ -190,18 +160,8 @@ from api.v1.serializers import (
    LighthouseConfigCreateSerializer,
    LighthouseConfigSerializer,
    LighthouseConfigUpdateSerializer,
-    LighthouseProviderConfigCreateSerializer,
-    LighthouseProviderConfigSerializer,
-    LighthouseProviderConfigUpdateSerializer,
-    LighthouseProviderModelsSerializer,
-    LighthouseTenantConfigSerializer,
-    LighthouseTenantConfigUpdateSerializer,
    MembershipSerializer,
-    MuteRuleCreateSerializer,
-    MuteRuleSerializer,
-    MuteRuleUpdateSerializer,
    OverviewFindingSerializer,
-    OverviewProviderCountSerializer,
    OverviewProviderSerializer,
    OverviewServiceSerializer,
    OverviewSeveritySerializer,
@@ -237,7 +197,6 @@ from api.v1.serializers import (
    TenantApiKeySerializer,
    TenantApiKeyUpdateSerializer,
    TenantSerializer,
-    ThreatScoreSnapshotSerializer,
    TokenRefreshSerializer,
    TokenSerializer,
    TokenSocialLoginSerializer,
@@ -348,7 +307,7 @@ class SchemaView(SpectacularAPIView):

    def get(self, request, *args, **kwargs):
        spectacular_settings.TITLE = "Prowler API"
-        spectacular_settings.VERSION = "1.15.0"
+        spectacular_settings.VERSION = "1.14.1"
        spectacular_settings.DESCRIPTION = (
            "Prowler API specification.\n\nThis file is auto-generated."
        )
@@ -440,12 +399,6 @@ class SchemaView(SpectacularAPIView):
                "description": "Endpoints for API keys management. These can be used as an alternative to JWT "
                "authorization.",
            },
-            {
-                "name": "Mute Rules",
-                "description": "Endpoints for simple mute rules management. These can be used as an alternative to the"
-                " Mutelist Processor if you need to mute specific findings across your tenant with a "
-                "specific reason.",
-            },
        ]
        return super().get(request, *args, **kwargs)

@@ -1464,7 +1417,7 @@ class ProviderGroupProvidersRelationshipView(RelationshipView, BaseRLSViewSet):
 )
@method_decorator(CACHE_DECORATOR, name="list")
@method_decorator(CACHE_DECORATOR, name="retrieve")
-class ProviderViewSet(DisablePaginationMixin, BaseRLSViewSet):
+class ProviderViewSet(BaseRLSViewSet):
    queryset = Provider.objects.all()
    serializer_class = ProviderSerializer
    http_method_names = ["get", "post", "patch", "delete"]
@@ -3724,13 +3677,6 @@ class ComplianceOverviewViewSet(BaseRLSViewSet, TaskManagementMixin):
            "each provider are considered in the aggregation to ensure accurate and up-to-date insights."
        ),
    ),
-    providers_count=extend_schema(
-        summary="Get provider counts grouped by type",
-        description=(
-            "Retrieve the number of providers grouped by provider type. "
-            "This endpoint counts every provider in the tenant, including those without completed scans."
-        ),
-    ),
    findings=extend_schema(
        summary="Get aggregated findings data",
        description=(
@@ -3782,16 +3728,12 @@ class OverviewViewSet(BaseRLSViewSet):
    def get_serializer_class(self):
        if self.action == "providers":
            return OverviewProviderSerializer
-        elif self.action == "providers_count":
-            return OverviewProviderCountSerializer
        elif self.action == "findings":
            return OverviewFindingSerializer
        elif self.action == "findings_severity":
            return OverviewSeveritySerializer
        elif self.action == "services":
            return OverviewServiceSerializer
-        elif self.action == "threatscore":
-            return ThreatScoreSnapshotSerializer
        return super().get_serializer_class()

    def get_filterset_class(self):
@@ -3873,36 +3815,6 @@ class OverviewViewSet(BaseRLSViewSet):
            status=status.HTTP_200_OK,
        )

-    @action(
-        detail=False,
-        methods=["get"],
-        url_path="providers/count",
-        url_name="providers-count",
-    )
-    def providers_count(self, request):
-        tenant_id = self.request.tenant_id
-        providers_qs = Provider.objects.filter(tenant_id=tenant_id)
-
-        if hasattr(self, "allowed_providers"):
-            allowed_ids = list(self.allowed_providers.values_list("id", flat=True))
-            if not allowed_ids:
-                overview = []
-                return Response(
-                    self.get_serializer(overview, many=True).data,
-                    status=status.HTTP_200_OK,
-                )
-            providers_qs = providers_qs.filter(id__in=allowed_ids)
-
-        overview = (
-            providers_qs.values("provider")
-            .annotate(count=Count("id"))
-            .order_by("provider")
-        )
-        return Response(
-            self.get_serializer(overview, many=True).data,
-            status=status.HTTP_200_OK,
-        )
-
    @action(detail=False, methods=["get"], url_name="findings")
    def findings(self, request):
        tenant_id = self.request.tenant_id
@@ -4033,332 +3945,6 @@ class OverviewViewSet(BaseRLSViewSet):

        return Response(serializer.data, status=status.HTTP_200_OK)

-    @extend_schema(
-        summary="Get ThreatScore snapshots",
-        description=(
-            "Retrieve ThreatScore metrics. By default, returns the latest snapshot for each provider. "
-            "Use snapshot_id to retrieve a specific historical snapshot."
-        ),
-        tags=["Overviews"],
-        parameters=[
-            OpenApiParameter(
-                name="snapshot_id",
-                type=OpenApiTypes.UUID,
-                location=OpenApiParameter.QUERY,
-                description="Retrieve a specific snapshot by ID. If not provided, returns latest snapshots.",
-            ),
-            OpenApiParameter(
-                name="provider_id",
-                type=OpenApiTypes.UUID,
-                location=OpenApiParameter.QUERY,
-                description="Filter by specific provider ID",
-            ),
-            OpenApiParameter(
-                name="provider_id__in",
-                type=OpenApiTypes.STR,
-                location=OpenApiParameter.QUERY,
-                description="Filter by multiple provider IDs (comma-separated UUIDs)",
-            ),
-            OpenApiParameter(
-                name="provider_type",
-                type=OpenApiTypes.STR,
-                location=OpenApiParameter.QUERY,
-                description="Filter by provider type (aws, azure, gcp, etc.)",
-            ),
-            OpenApiParameter(
-                name="provider_type__in",
-                type=OpenApiTypes.STR,
-                location=OpenApiParameter.QUERY,
-                description="Filter by multiple provider types (comma-separated)",
-            ),
-        ],
-    )
-    @action(detail=False, methods=["get"], url_name="threatscore")
-    def threatscore(self, request):
-        """
-        Get ThreatScore snapshots.
-
-        Default behavior: Returns the latest snapshot for each provider.
-        With snapshot_id: Returns the specific snapshot requested.
-        """
-        tenant_id = self.request.tenant_id
-        snapshot_id = request.query_params.get("snapshot_id")
-
-        # Base queryset with RLS
-        base_queryset = ThreatScoreSnapshot.objects.filter(tenant_id=tenant_id)
-
-        # Apply RBAC filtering
-        if hasattr(self, "allowed_providers"):
-            base_queryset = base_queryset.filter(provider__in=self.allowed_providers)
-
-        # Case 1: Specific snapshot requested
-        if snapshot_id:
-            try:
-                snapshot = base_queryset.get(id=snapshot_id)
-                serializer = ThreatScoreSnapshotSerializer(
-                    snapshot, context={"request": request}
-                )
-                return Response(serializer.data, status=status.HTTP_200_OK)
-            except ThreatScoreSnapshot.DoesNotExist:
-                raise NotFound(detail="ThreatScore snapshot not found")
-
-        # Case 2: Latest snapshot per provider (default)
-        # Apply filters manually: this @action is outside the standard list endpoint flow,
-        # so DRF's filter backends don't execute and we must flatten JSON:API params ourselves.
-        normalized_params = QueryDict(mutable=True)
-        for param_key, values in request.query_params.lists():
-            normalized_key = param_key
-            if param_key.startswith("filter[") and param_key.endswith("]"):
-                normalized_key = param_key[7:-1]
-            if normalized_key == "snapshot_id":
-                continue
-            normalized_params.setlist(normalized_key, values)
-
-        filterset = ThreatScoreSnapshotFilter(normalized_params, queryset=base_queryset)
-        filtered_queryset = filterset.qs
-
-        # Get distinct provider IDs from filtered queryset
-        # Pick the latest snapshot per provider using Postgres DISTINCT ON pattern.
-        # This avoids issuing one query per provider (N+1) when the filtered dataset is large.
-        latest_snapshot_ids = list(
-            filtered_queryset.order_by("provider_id", "-inserted_at")
-            .distinct("provider_id")
-            .values_list("id", flat=True)
-        )
-        latest_snapshot_map = {
-            snapshot.id: snapshot
-            for snapshot in filtered_queryset.filter(id__in=latest_snapshot_ids)
-        }
-        latest_snapshots = [
-            latest_snapshot_map[snapshot_id]
-            for snapshot_id in latest_snapshot_ids
-            if snapshot_id in latest_snapshot_map
-        ]
-
-        if len(latest_snapshots) <= 1:
-            serializer = ThreatScoreSnapshotSerializer(
-                latest_snapshots, many=True, context={"request": request}
-            )
-            return Response(serializer.data, status=status.HTTP_200_OK)
-
-        snapshot_ids = [
-            snapshot.id for snapshot in latest_snapshots if snapshot and snapshot.id
-        ]
-        aggregated_snapshot = self._build_threatscore_overview_snapshot(
-            snapshot_ids, tenant_id
-        )
-        serializer = ThreatScoreSnapshotSerializer(
-            [aggregated_snapshot], many=True, context={"request": request}
-        )
-        return Response(serializer.data, status=status.HTTP_200_OK)
-
-    def _build_threatscore_overview_snapshot(self, snapshot_ids, tenant_id):
-        """
-        Aggregate the latest snapshots into a single overview snapshot for the tenant.
-        """
-        if not snapshot_ids:
-            raise ValueError(
-                "Snapshot id list cannot be empty when aggregating threatscore overview"
-            )
-
-        base_queryset = ThreatScoreSnapshot.objects.filter(
-            tenant_id=tenant_id, id__in=snapshot_ids
-        )
-
-        annotated_queryset = (
-            base_queryset.annotate(
-                active_requirements=ExpressionWrapper(
-                    F("total_requirements") - F("manual_requirements"),
-                    output_field=IntegerField(),
-                )
-            )
-            .annotate(
-                weight=Case(
-                    When(total_findings__gt=0, then=F("total_findings")),
-                    When(
-                        active_requirements__gt=0,
-                        then=F("active_requirements"),
-                    ),
-                    default=Value(1, output_field=IntegerField()),
-                    output_field=IntegerField(),
-                )
-            )
-            .order_by()
-        )
-
-        aggregated_metrics = annotated_queryset.aggregate(
-            total_requirements=Sum("total_requirements"),
-            passed_requirements=Sum("passed_requirements"),
-            failed_requirements=Sum("failed_requirements"),
-            manual_requirements=Sum("manual_requirements"),
-            total_findings=Sum("total_findings"),
-            passed_findings=Sum("passed_findings"),
-            failed_findings=Sum("failed_findings"),
-            weighted_overall_sum=Sum(
-                ExpressionWrapper(
-                    F("overall_score") * F("weight"),
-                    output_field=DecimalField(max_digits=14, decimal_places=4),
-                )
-            ),
-            overall_weight=Sum("weight"),
-            unweighted_overall_sum=Sum("overall_score"),
-            weighted_delta_sum=Sum(
-                Case(
-                    When(
-                        score_delta__isnull=False,
-                        then=ExpressionWrapper(
-                            F("score_delta") * F("weight"),
-                            output_field=DecimalField(max_digits=14, decimal_places=4),
-                        ),
-                    ),
-                    default=Value(
-                        Decimal("0"),
-                        output_field=DecimalField(max_digits=14, decimal_places=4),
-                    ),
-                    output_field=DecimalField(max_digits=14, decimal_places=4),
-                )
-            ),
-            delta_weight=Sum(
-                Case(
-                    When(score_delta__isnull=False, then=F("weight")),
-                    default=Value(0, output_field=IntegerField()),
-                    output_field=IntegerField(),
-                )
-            ),
-            provider_count=Count("id"),
-            latest_inserted_at=Max("inserted_at"),
-        )
-
-        total_requirements = aggregated_metrics["total_requirements"] or 0
-        passed_requirements = aggregated_metrics["passed_requirements"] or 0
-        failed_requirements = aggregated_metrics["failed_requirements"] or 0
-        manual_requirements = aggregated_metrics["manual_requirements"] or 0
-        total_findings = aggregated_metrics["total_findings"] or 0
-        passed_findings = aggregated_metrics["passed_findings"] or 0
-        failed_findings = aggregated_metrics["failed_findings"] or 0
-
-        weighted_overall_sum = aggregated_metrics["weighted_overall_sum"]
-        if weighted_overall_sum is None:
-            weighted_overall_sum = Decimal("0")
-        unweighted_overall_sum = aggregated_metrics["unweighted_overall_sum"]
-        if unweighted_overall_sum is None:
-            unweighted_overall_sum = Decimal("0")
-
-        overall_weight = aggregated_metrics["overall_weight"] or 0
-        provider_count = aggregated_metrics["provider_count"] or 0
-
-        weighted_delta_sum = aggregated_metrics["weighted_delta_sum"]
-        if weighted_delta_sum is None:
-            weighted_delta_sum = Decimal("0")
-        delta_weight = aggregated_metrics["delta_weight"] or 0
-
-        if overall_weight > 0:
-            overall_score = (weighted_overall_sum / Decimal(overall_weight)).quantize(
-                Decimal("0.01"), rounding=ROUND_HALF_UP
-            )
-        elif provider_count > 0:
-            overall_score = (unweighted_overall_sum / Decimal(provider_count)).quantize(
-                Decimal("0.01"), rounding=ROUND_HALF_UP
-            )
-        else:
-            overall_score = Decimal("0.00")
-
-        if delta_weight > 0:
-            score_delta = (weighted_delta_sum / Decimal(delta_weight)).quantize(
-                Decimal("0.01"), rounding=ROUND_HALF_UP
-            )
-        else:
-            score_delta = None
-
-        section_weighted_sums = defaultdict(lambda: Decimal("0"))
-        section_weights = defaultdict(lambda: Decimal("0"))
-
-        combined_critical_requirements = {}
-
-        snapshots_with_weight = list(annotated_queryset)
-
-        for snapshot in snapshots_with_weight:
-            weight_value = getattr(snapshot, "weight", None)
-            try:
-                weight_decimal = Decimal(weight_value)
-            except (InvalidOperation, TypeError):
-                weight_decimal = Decimal("1")
-            if weight_decimal <= 0:
-                weight_decimal = Decimal("1")
-
-            section_scores = snapshot.section_scores or {}
-            for section, score in section_scores.items():
-                try:
-                    score_decimal = Decimal(str(score))
-                except (InvalidOperation, TypeError):
-                    continue
-                section_weighted_sums[section] += score_decimal * weight_decimal
-                section_weights[section] += weight_decimal
-
-            for requirement in snapshot.critical_requirements or []:
-                key = requirement.get("requirement_id") or requirement.get("title")
-                if not key:
-                    continue
-                existing = combined_critical_requirements.get(key)
-
-                def requirement_sort_key(item):
-                    return (
-                        item.get("risk_level") or 0,
-                        item.get("weight") or 0,
-                    )
-
-                if existing is None or requirement_sort_key(
-                    requirement
-                ) > requirement_sort_key(existing):
-                    combined_critical_requirements[key] = deepcopy(requirement)
-
-        aggregated_section_scores = {}
-        for section, total in section_weighted_sums.items():
-            weight_total = section_weights[section]
-            if weight_total > 0:
-                aggregated_section_scores[section] = str(
-                    (total / weight_total).quantize(
-                        Decimal("0.01"), rounding=ROUND_HALF_UP
-                    )
-                )
-
-        aggregated_section_scores = dict(sorted(aggregated_section_scores.items()))
-
-        aggregated_critical_requirements = sorted(
-            combined_critical_requirements.values(),
-            key=lambda item: (
-                item.get("risk_level") or 0,
-                item.get("weight") or 0,
-            ),
-            reverse=True,
-        )
-
-        aggregated_snapshot = ThreatScoreSnapshot(
-            tenant_id=tenant_id,
-            scan=None,
-            provider=None,
-            compliance_id="prowler_threatscore_overview",
-            overall_score=overall_score,
-            score_delta=score_delta,
-            section_scores=aggregated_section_scores,
-            critical_requirements=aggregated_critical_requirements,
-            total_requirements=total_requirements,
-            passed_requirements=passed_requirements,
-            failed_requirements=failed_requirements,
-            manual_requirements=manual_requirements,
-            total_findings=total_findings,
-            passed_findings=passed_findings,
-            failed_findings=failed_findings,
-        )
-
-        latest_inserted_at = aggregated_metrics["latest_inserted_at"]
-        if latest_inserted_at is not None:
-            aggregated_snapshot.inserted_at = latest_inserted_at
-
-        aggregated_snapshot._aggregated = True
-
-        return aggregated_snapshot
-

@extend_schema(tags=["Schedule"])
@extend_schema_view(
@@ -4591,25 +4177,21 @@ class IntegrationJiraViewSet(BaseRLSViewSet):
        tags=["Lighthouse AI"],
        summary="List all Lighthouse AI configurations",
        description="Retrieve a list of all Lighthouse AI configurations.",
-        deprecated=True,
    ),
    create=extend_schema(
        tags=["Lighthouse AI"],
        summary="Create a new Lighthouse AI configuration",
        description="Create a new Lighthouse AI configuration with the specified details.",
-        deprecated=True,
    ),
    partial_update=extend_schema(
        tags=["Lighthouse AI"],
        summary="Partially update a Lighthouse AI configuration",
        description="Update certain fields of an existing Lighthouse AI configuration.",
-        deprecated=True,
    ),
    destroy=extend_schema(
        tags=["Lighthouse AI"],
        summary="Delete a Lighthouse AI configuration",
        description="Remove a Lighthouse AI configuration by its ID.",
-        deprecated=True,
    ),
    connection=extend_schema(
        tags=["Lighthouse AI"],
@@ -4617,7 +4199,6 @@ class IntegrationJiraViewSet(BaseRLSViewSet):
        description="Verify the connection to the OpenAI API for a specific Lighthouse AI configuration.",
        request=None,
        responses={202: OpenApiResponse(response=TaskSerializer)},
-        deprecated=True,
    ),
 )
 class LighthouseConfigViewSet(BaseRLSViewSet):
@@ -4668,255 +4249,6 @@ class LighthouseConfigViewSet(BaseRLSViewSet):
        )


-@extend_schema_view(
-    list=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="List all LLM provider configurations",
-        description="Retrieve all LLM provider configurations for the current tenant",
-    ),
-    retrieve=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Retrieve LLM provider configuration",
-        description="Get details for a specific provider configuration in the current tenant.",
-    ),
-    create=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Create LLM provider configuration",
-        description="Create a per-tenant configuration for an LLM provider. Only one configuration per provider type "
-        "is allowed per tenant.",
-    ),
-    partial_update=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Update LLM provider configuration",
-        description="Partially update a provider configuration (e.g., base_url, is_active).",
-    ),
-    destroy=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Delete LLM provider configuration",
-        description="Delete a provider configuration. Any tenant defaults that reference this provider are cleared "
-        "during deletion.",
-    ),
-)
-class LighthouseProviderConfigViewSet(BaseRLSViewSet):
-    queryset = LighthouseProviderConfiguration.objects.all()
-    serializer_class = LighthouseProviderConfigSerializer
-    http_method_names = ["get", "post", "patch", "delete"]
-    filterset_class = LighthouseProviderConfigFilter
-
-    def get_queryset(self):
-        if getattr(self, "swagger_fake_view", False):
-            return LighthouseProviderConfiguration.objects.none()
-        return LighthouseProviderConfiguration.objects.filter(
-            tenant_id=self.request.tenant_id
-        )
-
-    def get_serializer_class(self):
-        if self.action == "create":
-            return LighthouseProviderConfigCreateSerializer
-        elif self.action == "partial_update":
-            return LighthouseProviderConfigUpdateSerializer
-        elif self.action in ["connection", "refresh_models"]:
-            return TaskSerializer
-        return super().get_serializer_class()
-
-    def create(self, request, *args, **kwargs):
-        serializer = self.get_serializer(data=request.data)
-        serializer.is_valid(raise_exception=True)
-        instance = serializer.save()
-
-        read_serializer = LighthouseProviderConfigSerializer(
-            instance, context=self.get_serializer_context()
-        )
-        headers = self.get_success_headers(read_serializer.data)
-        return Response(
-            data=read_serializer.data,
-            status=status.HTTP_201_CREATED,
-            headers=headers,
-        )
-
-    def partial_update(self, request, *args, **kwargs):
-        instance = self.get_object()
-        serializer = self.get_serializer(
-            instance,
-            data=request.data,
-            partial=True,
-            context=self.get_serializer_context(),
-        )
-        serializer.is_valid(raise_exception=True)
-        serializer.save()
-        read_serializer = LighthouseProviderConfigSerializer(
-            instance, context=self.get_serializer_context()
-        )
-        return Response(data=read_serializer.data, status=status.HTTP_200_OK)
-
-    @extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Check LLM provider connection",
-        description="Validate provider credentials asynchronously and toggle is_active.",
-        request=None,
-        responses={202: OpenApiResponse(response=TaskSerializer)},
-    )
-    @action(detail=True, methods=["post"], url_name="connection")
-    def connection(self, request, pk=None):
-        instance = self.get_object()
-
-        with transaction.atomic():
-            task = check_lighthouse_provider_connection_task.delay(
-                provider_config_id=str(instance.id), tenant_id=self.request.tenant_id
-            )
-
-        prowler_task = Task.objects.get(id=task.id)
-        serializer = TaskSerializer(prowler_task)
-        return Response(
-            data=serializer.data,
-            status=status.HTTP_202_ACCEPTED,
-            headers={
-                "Content-Location": reverse(
-                    "task-detail", kwargs={"pk": prowler_task.id}
-                )
-            },
-        )
-
-    @extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Refresh LLM models catalog",
-        description="Fetch available models for this provider configuration and upsert into catalog. Supports OpenAI, OpenAI-compatible, and AWS Bedrock providers.",
-        request=None,
-        responses={202: OpenApiResponse(response=TaskSerializer)},
-    )
-    @action(
-        detail=True,
-        methods=["post"],
-        url_path="refresh-models",
-        url_name="refresh-models",
-    )
-    def refresh_models(self, request, pk=None):
-        instance = self.get_object()
-
-        with transaction.atomic():
-            task = refresh_lighthouse_provider_models_task.delay(
-                provider_config_id=str(instance.id), tenant_id=self.request.tenant_id
-            )
-
-        prowler_task = Task.objects.get(id=task.id)
-        serializer = TaskSerializer(prowler_task)
-        return Response(
-            data=serializer.data,
-            status=status.HTTP_202_ACCEPTED,
-            headers={
-                "Content-Location": reverse(
-                    "task-detail", kwargs={"pk": prowler_task.id}
-                )
-            },
-        )
-
-
-@extend_schema_view(
-    list=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Get Lighthouse AI Tenant config",
-        description="Retrieve current tenant-level Lighthouse AI settings. Returns a single configuration object.",
-    ),
-    partial_update=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Update Lighthouse AI Tenant config",
-        description="Update tenant-level settings. Validates that the default provider is configured and active and that default model IDs exist for the chosen providers. Auto-creates configuration if it doesn't exist.",
-    ),
-)
-class LighthouseTenantConfigViewSet(BaseRLSViewSet):
-    """
-    Singleton endpoint for tenant-level Lighthouse AI configuration.
-
-    This viewset implements a true singleton pattern:
-    - GET returns the single configuration object (or 404 if not found)
-    - PATCH updates/creates the configuration (upsert semantics)
-    - No ID is required in the URL
-    """
-
-    queryset = LighthouseTenantConfiguration.objects.all()
-    serializer_class = LighthouseTenantConfigSerializer
-    http_method_names = ["get", "patch"]
-
-    def get_queryset(self):
-        if getattr(self, "swagger_fake_view", False):
-            return LighthouseTenantConfiguration.objects.none()
-        return LighthouseTenantConfiguration.objects.filter(
-            tenant_id=self.request.tenant_id
-        )
-
-    def get_serializer_class(self):
-        if self.action == "partial_update":
-            return LighthouseTenantConfigUpdateSerializer
-        return super().get_serializer_class()
-
-    def get_object(self):
-        """Retrieve the singleton instance for the current tenant."""
-        obj = LighthouseTenantConfiguration.objects.filter(
-            tenant_id=self.request.tenant_id
-        ).first()
-        if obj is None:
-            raise NotFound("Tenant Lighthouse configuration not found")
-        self.check_object_permissions(self.request, obj)
-        return obj
-
-    def list(self, request, *args, **kwargs):
-        """GET endpoint for singleton - returns single object, not an array."""
-        instance = self.get_object()
-        serializer = self.get_serializer(instance)
-        return Response(serializer.data)
-
-    def partial_update(self, request, *args, **kwargs):
-        """PATCH endpoint for singleton - no pk required. Auto-creates if not exists."""
-        # Auto-create tenant config if it doesn't exist (upsert semantics)
-        instance, created = LighthouseTenantConfiguration.objects.get_or_create(
-            tenant_id=self.request.tenant_id,
-            defaults={},
-        )
-
-        # Extract attributes from JSON:API payload
-        try:
-            payload = json.loads(request.body)
-            attributes = payload.get("data", {}).get("attributes", {})
-        except (json.JSONDecodeError, AttributeError):
-            raise ValidationError("Invalid JSON:API payload")
-
-        serializer = self.get_serializer(instance, data=attributes, partial=True)
-        serializer.is_valid(raise_exception=True)
-        serializer.save()
-        read_serializer = LighthouseTenantConfigSerializer(
-            instance, context=self.get_serializer_context()
-        )
-        return Response(read_serializer.data, status=status.HTTP_200_OK)
-
-
-@extend_schema_view(
-    list=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="List all LLM models",
-        description="List available LLM models per configured provider for the current tenant.",
-    ),
-    retrieve=extend_schema(
-        tags=["Lighthouse AI"],
-        summary="Retrieve LLM model details",
-        description="Get details for a specific LLM model.",
-    ),
-)
-class LighthouseProviderModelsViewSet(BaseRLSViewSet):
-    queryset = LighthouseProviderModels.objects.all()
-    serializer_class = LighthouseProviderModelsSerializer
-    filterset_class = LighthouseProviderModelsFilter
-    # Expose as read-only catalog collection
-    http_method_names = ["get"]
-
-    def get_queryset(self):
-        if getattr(self, "swagger_fake_view", False):
-            return LighthouseProviderModels.objects.none()
-        return LighthouseProviderModels.objects.filter(tenant_id=self.request.tenant_id)
-
-    def get_serializer_class(self):
-        return super().get_serializer_class()
-
-
@extend_schema_view(
    list=extend_schema(
        tags=["Processor"],
@@ -5047,95 +4379,3 @@ class TenantApiKeyViewSet(BaseRLSViewSet):

        serializer = self.get_serializer(instance)
        return Response(data=serializer.data, status=status.HTTP_200_OK)
-
-
-# MuteRules
-@extend_schema_view(
-    list=extend_schema(
-        tags=["Mute Rules"],
-        summary="List all mute rules",
-        description="Retrieve a list of all mute rules with filtering options.",
-    ),
-    retrieve=extend_schema(
-        tags=["Mute Rules"],
-        summary="Retrieve a mute rule",
-        description="Fetch detailed information about a specific mute rule by ID.",
-    ),
-    create=extend_schema(
-        tags=["Mute Rules"],
-        summary="Create a new mute rule",
-        description="Create a new mute rule by providing finding IDs, name, and reason. "
-        "The rule will immediately mute the selected findings and launch a background task "
-        "to mute all historical findings with matching UIDs.",
-        request=MuteRuleCreateSerializer,
-    ),
-    partial_update=extend_schema(
-        tags=["Mute Rules"],
-        summary="Partially update a mute rule",
-        description="Update certain fields of an existing mute rule (e.g., name, reason, enabled).",
-        request=MuteRuleUpdateSerializer,
-        responses={200: MuteRuleSerializer},
-    ),
-    destroy=extend_schema(
-        tags=["Mute Rules"],
-        summary="Delete a mute rule",
-        description="Remove a mute rule from the system. Note: Previously muted findings remain muted.",
-    ),
-)
-class MuteRuleViewSet(BaseRLSViewSet):
-    queryset = MuteRule.objects.all()
-    serializer_class = MuteRuleSerializer
-    filterset_class = MuteRuleFilter
-    http_method_names = ["get", "post", "patch", "delete"]
-    search_fields = ["name", "reason"]
-    ordering = ["-inserted_at"]
-    ordering_fields = [
-        "name",
-        "enabled",
-        "inserted_at",
-        "updated_at",
-    ]
-    required_permissions = [Permissions.MANAGE_SCANS]
-
-    def get_queryset(self):
-        queryset = MuteRule.objects.filter(tenant_id=self.request.tenant_id)
-        return queryset.select_related("created_by")
-
-    def get_serializer_class(self):
-        if self.action == "create":
-            return MuteRuleCreateSerializer
-        elif self.action == "partial_update":
-            return MuteRuleUpdateSerializer
-        return super().get_serializer_class()
-
-    def create(self, request, *args, **kwargs):
-        serializer = self.get_serializer(data=request.data)
-        serializer.is_valid(raise_exception=True)
-
-        # Create the mute rule
-        mute_rule = serializer.save()
-
-        tenant_id = str(request.tenant_id)
-        finding_ids = request.data.get("finding_ids", [])
-
-        # Immediately mute the selected findings
-        Finding.all_objects.filter(
-            id__in=finding_ids, tenant_id=tenant_id, muted=False
-        ).update(
-            muted=True,
-            muted_at=mute_rule.inserted_at,
-            muted_reason=mute_rule.reason,
-        )
-
-        # Launch background task for historical muting
-        with transaction.atomic():
-            mute_historical_findings_task.apply_async(
-                kwargs={"tenant_id": tenant_id, "mute_rule_id": str(mute_rule.id)}
-            )
-
-        # Return the created mute rule
-        serializer = self.get_serializer(mute_rule)
-        return Response(
-            data=serializer.data,
-            status=status.HTTP_201_CREATED,
-        )
@@ -125,10 +125,6 @@ SPECTACULAR_SETTINGS = {
        "drf_spectacular_jsonapi.hooks.fix_nested_path_parameters",
    ],
    "POSTPROCESSING_HOOKS": [
-        "api.schema_hooks.fix_empty_id_fields",
-        "api.schema_hooks.fix_pattern_properties",
-        "api.schema_hooks.fix_type_formats",
-        "api.schema_hooks.add_api_servers",
        "api.schema_hooks.attach_task_202_examples",
    ],
    "TITLE": "API Reference - Prowler",
@@ -1,5 +1,7 @@
+from django.contrib import admin
 from django.urls import include, path

 urlpatterns = [
+    path("admin/", admin.site.urls),
    path("api/v1/", include("api.v1.urls")),
 ]
@@ -23,7 +23,6 @@ from api.models import (
    Invitation,
    LighthouseConfiguration,
    Membership,
-    MuteRule,
    Processor,
    Provider,
    ProviderGroup,
@@ -500,29 +499,8 @@ def providers_fixture(tenants_fixture):
        alias="m365_testing",
        tenant_id=tenant.id,
    )
-    provider7 = Provider.objects.create(
-        provider="oraclecloud",
-        uid="ocid1.tenancy.oc1..aaaaaaaa3dwoazoox4q7wrvriywpokp5grlhgnkwtyt6dmwyou7no6mdmzda",
-        alias="oci_testing",
-        tenant_id=tenant.id,
-    )
-    provider8 = Provider.objects.create(
-        provider="mongodbatlas",
-        uid="64b1d3c0e4b03b1234567890",
-        alias="mongodbatlas_testing",
-        tenant_id=tenant.id,
-    )

-    return (
-        provider1,
-        provider2,
-        provider3,
-        provider4,
-        provider5,
-        provider6,
-        provider7,
-        provider8,
-    )
+    return provider1, provider2, provider3, provider4, provider5, provider6


@pytest.fixture
@@ -1441,34 +1419,6 @@ def api_keys_fixture(tenants_fixture, create_test_user):
    return [api_key1, api_key2, api_key3]


-@pytest.fixture
-def mute_rules_fixture(tenants_fixture, create_test_user, findings_fixture):
-    """Create test mute rules for testing."""
-    tenant = tenants_fixture[0]
-    user = create_test_user
-
-    # Create two mute rules: one enabled, one disabled
-    mute_rule1 = MuteRule.objects.create(
-        tenant_id=tenant.id,
-        name="Test Rule 1",
-        reason="Security exception for testing",
-        enabled=True,
-        created_by=user,
-        finding_uids=[findings_fixture[0].uid],
-    )
-
-    mute_rule2 = MuteRule.objects.create(
-        tenant_id=tenant.id,
-        name="Test Rule 2",
-        reason="Compliance exception approved",
-        enabled=False,
-        created_by=user,
-        finding_uids=[findings_fixture[1].uid],
-    )
-
-    return mute_rule1, mute_rule2
-
-
 def get_authorization_header(access_token: str) -> dict:
    return {"Authorization": f"Bearer {access_token}"}

@@ -21,8 +21,6 @@ from prowler.lib.outputs.compliance.aws_well_architected.aws_well_architected im
    AWSWellArchitected,
 )
 from prowler.lib.outputs.compliance.c5.c5_aws import AWSC5
-from prowler.lib.outputs.compliance.c5.c5_azure import AzureC5
-from prowler.lib.outputs.compliance.c5.c5_gcp import GCPC5
 from prowler.lib.outputs.compliance.ccc.ccc_aws import CCC_AWS
 from prowler.lib.outputs.compliance.ccc.ccc_azure import CCC_Azure
 from prowler.lib.outputs.compliance.ccc.ccc_gcp import CCC_GCP
@@ -32,7 +30,6 @@ from prowler.lib.outputs.compliance.cis.cis_gcp import GCPCIS
 from prowler.lib.outputs.compliance.cis.cis_github import GithubCIS
 from prowler.lib.outputs.compliance.cis.cis_kubernetes import KubernetesCIS
 from prowler.lib.outputs.compliance.cis.cis_m365 import M365CIS
-from prowler.lib.outputs.compliance.cis.cis_oraclecloud import OracleCloudCIS
 from prowler.lib.outputs.compliance.ens.ens_aws import AWSENS
 from prowler.lib.outputs.compliance.ens.ens_azure import AzureENS
 from prowler.lib.outputs.compliance.ens.ens_gcp import GCPENS
@@ -90,7 +87,6 @@ COMPLIANCE_CLASS_MAP = {
        (lambda name: name.startswith("iso27001_"), AzureISO27001),
        (lambda name: name == "ccc_azure", CCC_Azure),
        (lambda name: name == "prowler_threatscore_azure", ProwlerThreatScoreAzure),
-        (lambda name: name == "c5_azure", AzureC5),
    ],
    "gcp": [
        (lambda name: name.startswith("cis_"), GCPCIS),
@@ -99,7 +95,6 @@ COMPLIANCE_CLASS_MAP = {
        (lambda name: name.startswith("iso27001_"), GCPISO27001),
        (lambda name: name == "prowler_threatscore_gcp", ProwlerThreatScoreGCP),
        (lambda name: name == "ccc_gcp", CCC_GCP),
-        (lambda name: name == "c5_gcp", GCPC5),
    ],
    "kubernetes": [
        (lambda name: name.startswith("cis_"), KubernetesCIS),
@@ -113,13 +108,6 @@ COMPLIANCE_CLASS_MAP = {
    "github": [
        (lambda name: name.startswith("cis_"), GithubCIS),
    ],
-    "iac": [
-        # IaC provider doesn't have specific compliance frameworks yet
-        # Trivy handles its own compliance checks
-    ],
-    "oraclecloud": [
-        (lambda name: name.startswith("cis_"), OracleCloudCIS),
-    ],
 }


@@ -1,452 +0,0 @@
-from typing import Dict
-
-import boto3
-import openai
-from botocore.exceptions import BotoCoreError, ClientError
-from celery.utils.log import get_task_logger
-
-from api.models import LighthouseProviderConfiguration, LighthouseProviderModels
-
-logger = get_task_logger(__name__)
-
-
-def _extract_openai_api_key(
-    provider_cfg: LighthouseProviderConfiguration,
-) -> str | None:
-    """
-    Safely extract the OpenAI API key from a provider configuration.
-
-    Args:
-        provider_cfg (LighthouseProviderConfiguration): The provider configuration instance
-            containing the credentials.
-
-    Returns:
-        str | None: The API key string if present and valid, otherwise None.
-    """
-    creds = provider_cfg.credentials_decoded
-    if not isinstance(creds, dict):
-        return None
-    api_key = creds.get("api_key")
-    if not isinstance(api_key, str) or not api_key:
-        return None
-    return api_key
-
-
-def _extract_openai_compatible_params(
-    provider_cfg: LighthouseProviderConfiguration,
-) -> Dict[str, str] | None:
-    """
-    Extract base_url and api_key for OpenAI-compatible providers.
-    """
-    creds = provider_cfg.credentials_decoded
-    base_url = provider_cfg.base_url
-    if not isinstance(creds, dict):
-        return None
-    api_key = creds.get("api_key")
-    if not isinstance(api_key, str) or not api_key:
-        return None
-    if not isinstance(base_url, str) or not base_url:
-        return None
-    return {"base_url": base_url, "api_key": api_key}
-
-
-def _extract_bedrock_credentials(
-    provider_cfg: LighthouseProviderConfiguration,
-) -> Dict[str, str] | None:
-    """
-    Safely extract AWS Bedrock credentials from a provider configuration.
-
-    Args:
-        provider_cfg (LighthouseProviderConfiguration): The provider configuration instance
-            containing the credentials.
-
-    Returns:
-        Dict[str, str] | None: Dictionary with 'access_key_id', 'secret_access_key', and
-            'region' if present and valid, otherwise None.
-    """
-    creds = provider_cfg.credentials_decoded
-    if not isinstance(creds, dict):
-        return None
-
-    access_key_id = creds.get("access_key_id")
-    secret_access_key = creds.get("secret_access_key")
-    region = creds.get("region")
-
-    # Validate all required fields are present and are strings
-    if (
-        not isinstance(access_key_id, str)
-        or not access_key_id
-        or not isinstance(secret_access_key, str)
-        or not secret_access_key
-        or not isinstance(region, str)
-        or not region
-    ):
-        return None
-
-    return {
-        "access_key_id": access_key_id,
-        "secret_access_key": secret_access_key,
-        "region": region,
-    }
-
-
-def check_lighthouse_provider_connection(provider_config_id: str) -> Dict:
-    """
-    Validate a Lighthouse provider configuration by calling the provider API and
-    toggle its active state accordingly.
-
-    Args:
-        provider_config_id: The primary key of the `LighthouseProviderConfiguration`
-            to validate.
-
-    Returns:
-        dict: A result dictionary with the following keys:
-            - "connected" (bool): Whether the provider credentials are valid.
-            - "error" (str | None): The error message when not connected, otherwise None.
-
-    Side Effects:
-        - Updates and persists `is_active` on the `LighthouseProviderConfiguration`.
-
-    Raises:
-        LighthouseProviderConfiguration.DoesNotExist: If no configuration exists with the given ID.
-    """
-    provider_cfg = LighthouseProviderConfiguration.objects.get(pk=provider_config_id)
-
-    try:
-        if (
-            provider_cfg.provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI
-        ):
-            api_key = _extract_openai_api_key(provider_cfg)
-            if not api_key:
-                provider_cfg.is_active = False
-                provider_cfg.save()
-                return {"connected": False, "error": "API key is invalid or missing"}
-
-            # Test connection by listing models
-            client = openai.OpenAI(api_key=api_key)
-            _ = client.models.list()
-
-        elif (
-            provider_cfg.provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK
-        ):
-            bedrock_creds = _extract_bedrock_credentials(provider_cfg)
-            if not bedrock_creds:
-                provider_cfg.is_active = False
-                provider_cfg.save()
-                return {
-                    "connected": False,
-                    "error": "AWS credentials are invalid or missing",
-                }
-
-            # Test connection by listing foundation models
-            bedrock_client = boto3.client(
-                "bedrock",
-                aws_access_key_id=bedrock_creds["access_key_id"],
-                aws_secret_access_key=bedrock_creds["secret_access_key"],
-                region_name=bedrock_creds["region"],
-            )
-            _ = bedrock_client.list_foundation_models()
-
-        elif (
-            provider_cfg.provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE
-        ):
-            params = _extract_openai_compatible_params(provider_cfg)
-            if not params:
-                provider_cfg.is_active = False
-                provider_cfg.save()
-                return {
-                    "connected": False,
-                    "error": "Base URL or API key is invalid or missing",
-                }
-
-            # Test connection using OpenAI SDK with custom base_url
-            # Note: base_url should include version (e.g., https://openrouter.ai/api/v1)
-            client = openai.OpenAI(
-                api_key=params["api_key"],
-                base_url=params["base_url"],
-            )
-            _ = client.models.list()
-
-        else:
-            return {"connected": False, "error": "Unsupported provider type"}
-
-        # Connection successful
-        provider_cfg.is_active = True
-        provider_cfg.save()
-        return {"connected": True, "error": None}
-
-    except Exception as e:
-        logger.warning(
-            "%s connection check failed: %s", provider_cfg.provider_type, str(e)
-        )
-        provider_cfg.is_active = False
-        provider_cfg.save()
-        return {"connected": False, "error": str(e)}
-
-
-def _fetch_openai_models(api_key: str) -> Dict[str, str]:
-    """
-    Fetch available models from OpenAI API.
-
-    Args:
-        api_key: OpenAI API key for authentication.
-
-    Returns:
-        Dict mapping model_id to model_name. For OpenAI, both are the same
-        as the API doesn't provide separate display names.
-
-    Raises:
-        Exception: If the API call fails.
-    """
-    client = openai.OpenAI(api_key=api_key)
-    models = client.models.list()
-    # OpenAI uses model.id for both ID and display name
-    return {m.id: m.id for m in getattr(models, "data", [])}
-
-
-def _fetch_openai_compatible_models(base_url: str, api_key: str) -> Dict[str, str]:
-    """
-    Fetch available models from an OpenAI-compatible API using the OpenAI SDK.
-
-    Returns a mapping of model_id -> model_name. Prefers the 'name' attribute
-    if available (e.g., from OpenRouter), otherwise falls back to 'id'.
-
-    Note: base_url should include version (e.g., https://openrouter.ai/api/v1)
-    """
-    client = openai.OpenAI(api_key=api_key, base_url=base_url)
-    models = client.models.list()
-
-    available_models: Dict[str, str] = {}
-    for model in models.data:
-        model_id = model.id
-        # Prefer provider-supplied human-friendly name when available
-        name = getattr(model, "name", None)
-        if name:
-            available_models[model_id] = name
-        else:
-            available_models[model_id] = model_id
-
-    return available_models
-
-
-def _fetch_bedrock_models(bedrock_creds: Dict[str, str]) -> Dict[str, str]:
-    """
-    Fetch available models from AWS Bedrock with entitlement verification.
-
-    This function:
-    1. Lists foundation models with TEXT modality support
-    2. Lists inference profiles with TEXT modality support
-    3. Verifies user has entitlement access to each model
-
-    Args:
-        bedrock_creds: Dictionary with 'access_key_id', 'secret_access_key', and 'region'.
-
-    Returns:
-        Dict mapping model_id to model_name for all accessible models.
-
-    Raises:
-        BotoCoreError, ClientError: If AWS API calls fail.
-    """
-    bedrock_client = boto3.client(
-        "bedrock",
-        aws_access_key_id=bedrock_creds["access_key_id"],
-        aws_secret_access_key=bedrock_creds["secret_access_key"],
-        region_name=bedrock_creds["region"],
-    )
-
-    models_to_check: Dict[str, str] = {}
-
-    # Step 1: Get foundation models with TEXT modality
-    foundation_response = bedrock_client.list_foundation_models()
-    model_summaries = foundation_response.get("modelSummaries", [])
-
-    for model in model_summaries:
-        # Check if model supports TEXT input and output modality
-        input_modalities = model.get("inputModalities", [])
-        output_modalities = model.get("outputModalities", [])
-
-        if "TEXT" not in input_modalities or "TEXT" not in output_modalities:
-            continue
-
-        model_id = model.get("modelId")
-        if not model_id:
-            continue
-
-        inference_types = model.get("inferenceTypesSupported", [])
-
-        # Only include models with ON_DEMAND inference support
-        if "ON_DEMAND" in inference_types:
-            models_to_check[model_id] = model["modelName"]
-
-    # Step 2: Get inference profiles
-    try:
-        inference_profiles_response = bedrock_client.list_inference_profiles()
-        inference_profiles = inference_profiles_response.get(
-            "inferenceProfileSummaries", []
-        )
-
-        for profile in inference_profiles:
-            # Check if profile supports TEXT modality
-            input_modalities = profile.get("inputModalities", [])
-            output_modalities = profile.get("outputModalities", [])
-
-            if "TEXT" not in input_modalities or "TEXT" not in output_modalities:
-                continue
-
-            profile_id = profile.get("inferenceProfileId")
-            if profile_id:
-                models_to_check[profile_id] = profile["inferenceProfileName"]
-
-    except (BotoCoreError, ClientError) as e:
-        logger.info(
-            "Could not fetch inference profiles in %s: %s",
-            bedrock_creds["region"],
-            str(e),
-        )
-
-    # Step 3: Verify entitlement availability for each model
-    available_models: Dict[str, str] = {}
-
-    for model_id, model_name in models_to_check.items():
-        try:
-            availability = bedrock_client.get_foundation_model_availability(
-                modelId=model_id
-            )
-
-            entitlement = availability.get("entitlementAvailability")
-
-            # Only include models user has access to
-            if entitlement == "AVAILABLE":
-                available_models[model_id] = model_name
-            else:
-                logger.debug(
-                    "Skipping model %s - entitlement status: %s", model_id, entitlement
-                )
-
-        except (BotoCoreError, ClientError) as e:
-            logger.debug(
-                "Could not check availability for model %s: %s", model_id, str(e)
-            )
-            continue
-
-    return available_models
-
-
-def refresh_lighthouse_provider_models(provider_config_id: str) -> Dict:
-    """
-    Refresh the catalog of models for a Lighthouse provider configuration.
-
-    Fetches the current list of models from the provider, upserts entries into
-    `LighthouseProviderModels`, and deletes stale entries no longer returned.
-
-    Args:
-        provider_config_id: The primary key of the `LighthouseProviderConfiguration`
-            whose models should be refreshed.
-
-    Returns:
-        dict: A result dictionary with the following keys on success:
-            - "created" (int): Number of new model rows created.
-            - "updated" (int): Number of existing model rows updated.
-            - "deleted" (int): Number of stale model rows removed.
-        If an error occurs, the dictionary will contain an "error" (str) field instead.
-
-    Raises:
-        LighthouseProviderConfiguration.DoesNotExist: If no configuration exists with the given ID.
-    """
-    provider_cfg = LighthouseProviderConfiguration.objects.get(pk=provider_config_id)
-    fetched_models: Dict[str, str] = {}
-
-    # Fetch models from the appropriate provider
-    try:
-        if (
-            provider_cfg.provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI
-        ):
-            api_key = _extract_openai_api_key(provider_cfg)
-            if not api_key:
-                return {
-                    "created": 0,
-                    "updated": 0,
-                    "deleted": 0,
-                    "error": "API key is invalid or missing",
-                }
-            fetched_models = _fetch_openai_models(api_key)
-
-        elif (
-            provider_cfg.provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK
-        ):
-            bedrock_creds = _extract_bedrock_credentials(provider_cfg)
-            if not bedrock_creds:
-                return {
-                    "created": 0,
-                    "updated": 0,
-                    "deleted": 0,
-                    "error": "AWS credentials are invalid or missing",
-                }
-            fetched_models = _fetch_bedrock_models(bedrock_creds)
-
-        elif (
-            provider_cfg.provider_type
-            == LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE
-        ):
-            params = _extract_openai_compatible_params(provider_cfg)
-            if not params:
-                return {
-                    "created": 0,
-                    "updated": 0,
-                    "deleted": 0,
-                    "error": "Base URL or API key is invalid or missing",
-                }
-            fetched_models = _fetch_openai_compatible_models(
-                params["base_url"], params["api_key"]
-            )
-
-        else:
-            return {
-                "created": 0,
-                "updated": 0,
-                "deleted": 0,
-                "error": "Unsupported provider type",
-            }
-
-    except Exception as e:
-        logger.warning(
-            "Unexpected error refreshing %s models: %s",
-            provider_cfg.provider_type,
-            str(e),
-        )
-        return {"created": 0, "updated": 0, "deleted": 0, "error": str(e)}
-
-    # Upsert models into the catalog
-    created = 0
-    updated = 0
-
-    for model_id, model_name in fetched_models.items():
-        obj, was_created = LighthouseProviderModels.objects.update_or_create(
-            tenant_id=provider_cfg.tenant_id,
-            provider_configuration=provider_cfg,
-            model_id=model_id,
-            defaults={
-                "model_name": model_name,
-                "default_parameters": {},
-            },
-        )
-        if was_created:
-            created += 1
-        else:
-            updated += 1
-
-    # Delete stale models not present anymore
-    deleted, _ = (
-        LighthouseProviderModels.objects.filter(
-            tenant_id=provider_cfg.tenant_id, provider_configuration=provider_cfg
-        )
-        .exclude(model_id__in=fetched_models.keys())
-        .delete()
-    )
-
-    return {"created": created, "updated": updated, "deleted": deleted}
@@ -1,64 +0,0 @@
-from celery.utils.log import get_task_logger
-from config.django.base import DJANGO_FINDINGS_BATCH_SIZE
-from tasks.utils import batched
-
-from api.db_utils import rls_transaction
-from api.models import Finding, MuteRule
-
-logger = get_task_logger(__name__)
-
-
-def mute_historical_findings(tenant_id: str, mute_rule_id: str):
-    """
-    Mute historical findings that match the given mute rule.
-
-    This function processes findings in batches, updating their muted status
-    and adding the mute reason.
-
-    Args:
-        tenant_id (str): The tenant ID for RLS context
-        mute_rule_id (str): The ID of the mute rule to apply
-
-    Returns:
-        dict: Summary of the muting operation with findings_muted count
-    """
-    findings_muted_count = 0
-
-    # Get the list of UIDs to mute and the reason
-    with rls_transaction(tenant_id):
-        mute_rule = MuteRule.objects.get(id=mute_rule_id, tenant_id=tenant_id)
-        finding_uids = mute_rule.finding_uids
-        mute_reason = mute_rule.reason
-        muted_at = mute_rule.inserted_at
-
-    # Query findings that match the UIDs and are not already muted
-    with rls_transaction(tenant_id):
-        findings_to_mute = Finding.objects.filter(
-            tenant_id=tenant_id, uid__in=finding_uids, muted=False
-        )
-        total_findings = findings_to_mute.count()
-
-        logger.info(
-            f"Processing {total_findings} findings for mute rule {mute_rule_id}"
-        )
-
-        if total_findings > 0:
-            for batch, is_last in batched(
-                findings_to_mute.iterator(), DJANGO_FINDINGS_BATCH_SIZE
-            ):
-                batch_ids = [f.id for f in batch]
-                updated_count = Finding.all_objects.filter(
-                    id__in=batch_ids, tenant_id=tenant_id
-                ).update(
-                    muted=True,
-                    muted_at=muted_at,
-                    muted_reason=mute_reason,
-                )
-                findings_muted_count += updated_count
-
-    logger.info(f"Muted {findings_muted_count} findings for rule {mute_rule_id}")
-
-    return {
-        "findings_muted": findings_muted_count,
-        "rule_id": mute_rule_id,
-    }
@@ -7,6 +7,7 @@ from shutil import rmtree
 import matplotlib.pyplot as plt
 from celery.utils.log import get_task_logger
 from config.django.base import DJANGO_FINDINGS_BATCH_SIZE, DJANGO_TMP_OUTPUT_DIRECTORY
+from django.db.models import Count, Q
 from reportlab.lib import colors
 from reportlab.lib.enums import TA_CENTER
 from reportlab.lib.pagesizes import letter
@@ -25,22 +26,11 @@ from reportlab.platypus import (
    TableStyle,
 )
 from tasks.jobs.export import _generate_output_directory, _upload_to_s3
-from tasks.jobs.threatscore import compute_threatscore_metrics
-from tasks.jobs.threatscore_utils import (
-    _aggregate_requirement_statistics_from_database,
-    _calculate_requirements_data_from_statistics,
-)
 from tasks.utils import batched

 from api.db_router import READ_REPLICA_ALIAS
 from api.db_utils import rls_transaction
-from api.models import (
-    Finding,
-    Provider,
-    ScanSummary,
-    StatusChoices,
-    ThreatScoreSnapshot,
-)
+from api.models import Finding, Provider, ScanSummary, StatusChoices
 from api.utils import initialize_prowler_provider
 from prowler.lib.check.compliance_models import Compliance
 from prowler.lib.outputs.finding import Finding as FindingOutput
@@ -444,6 +434,56 @@ def _add_pdf_footer(canvas_obj: canvas.Canvas, doc: SimpleDocTemplate) -> None:
    canvas_obj.drawString(width - text_width - 30, 20, powered_text)


+def _aggregate_requirement_statistics_from_database(
+    tenant_id: str, scan_id: str
+) -> dict[str, dict[str, int]]:
+    """
+    Aggregate finding statistics by check_id using database aggregation.
+
+    This function uses Django ORM aggregation to calculate pass/fail statistics
+    entirely in the database, avoiding the need to load findings into memory.
+
+    Args:
+        tenant_id (str): The tenant ID for Row-Level Security context.
+        scan_id (str): The ID of the scan to retrieve findings for.
+
+    Returns:
+        dict[str, dict[str, int]]: Dictionary mapping check_id to statistics:
+            - 'passed' (int): Number of passed findings for this check
+            - 'total' (int): Total number of findings for this check
+
+    Example:
+        {
+            'aws_iam_user_mfa_enabled': {'passed': 10, 'total': 15},
+            'aws_s3_bucket_public_access': {'passed': 0, 'total': 5}
+        }
+    """
+    requirement_statistics_by_check_id = {}
+
+    with rls_transaction(tenant_id, using=READ_REPLICA_ALIAS):
+        # Use database aggregation to calculate stats without loading findings into memory
+        aggregated_statistics_queryset = (
+            Finding.all_objects.filter(tenant_id=tenant_id, scan_id=scan_id)
+            .values("check_id")
+            .annotate(
+                total_findings=Count("id"),
+                passed_findings=Count("id", filter=Q(status=StatusChoices.PASS)),
+            )
+        )
+
+        for aggregated_stat in aggregated_statistics_queryset:
+            check_id = aggregated_stat["check_id"]
+            requirement_statistics_by_check_id[check_id] = {
+                "passed": aggregated_stat["passed_findings"],
+                "total": aggregated_stat["total_findings"],
+            }
+
+    logger.info(
+        f"Aggregated statistics for {len(requirement_statistics_by_check_id)} unique checks"
+    )
+    return requirement_statistics_by_check_id
+
+
 def _load_findings_for_requirement_checks(
    tenant_id: str, scan_id: str, check_ids: list[str], prowler_provider
 ) -> dict[str, list[FindingOutput]]:
@@ -504,6 +544,84 @@ def _load_findings_for_requirement_checks(
    return dict(findings_by_check_id)


+def _calculate_requirements_data_from_statistics(
+    compliance_obj, requirement_statistics_by_check_id: dict[str, dict[str, int]]
+) -> tuple[dict[str, dict], list[dict]]:
+    """
+    Calculate requirement status and statistics using pre-aggregated database statistics.
+
+    This function uses O(n) lookups with pre-aggregated statistics from the database,
+    avoiding the need to iterate over all findings for each requirement.
+
+    Args:
+        compliance_obj: The compliance framework object containing requirements.
+        requirement_statistics_by_check_id (dict[str, dict[str, int]]): Pre-aggregated statistics
+            mapping check_id to {'passed': int, 'total': int} counts.
+
+    Returns:
+        tuple[dict[str, dict], list[dict]]: A tuple containing:
+            - attributes_by_requirement_id: Dictionary mapping requirement IDs to their attributes.
+            - requirements_list: List of requirement dictionaries with status and statistics.
+    """
+    attributes_by_requirement_id = {}
+    requirements_list = []
+
+    compliance_framework = getattr(compliance_obj, "Framework", "N/A")
+    compliance_version = getattr(compliance_obj, "Version", "N/A")
+
+    for requirement in compliance_obj.Requirements:
+        requirement_id = requirement.Id
+        requirement_description = getattr(requirement, "Description", "")
+        requirement_checks = getattr(requirement, "Checks", [])
+        requirement_attributes = getattr(requirement, "Attributes", [])
+
+        # Store requirement metadata for later use
+        attributes_by_requirement_id[requirement_id] = {
+            "attributes": {
+                "req_attributes": requirement_attributes,
+                "checks": requirement_checks,
+            },
+            "description": requirement_description,
+        }
+
+        # Calculate aggregated passed and total findings for this requirement
+        total_passed_findings = 0
+        total_findings_count = 0
+
+        for check_id in requirement_checks:
+            if check_id in requirement_statistics_by_check_id:
+                check_statistics = requirement_statistics_by_check_id[check_id]
+                total_findings_count += check_statistics["total"]
+                total_passed_findings += check_statistics["passed"]
+
+        # Determine overall requirement status based on findings
+        if total_findings_count > 0:
+            if total_passed_findings == total_findings_count:
+                requirement_status = StatusChoices.PASS
+            else:
+                # Partial pass or complete fail both count as FAIL
+                requirement_status = StatusChoices.FAIL
+        else:
+            # No findings means manual review required
+            requirement_status = StatusChoices.MANUAL
+
+        requirements_list.append(
+            {
+                "id": requirement_id,
+                "attributes": {
+                    "framework": compliance_framework,
+                    "version": compliance_version,
+                    "status": requirement_status,
+                    "description": requirement_description,
+                    "passed_findings": total_passed_findings,
+                    "total_findings": total_findings_count,
+                },
+            }
+        )
+
+    return attributes_by_requirement_id, requirements_list
+
+
 def generate_threatscore_report(
    tenant_id: str,
    scan_id: str,
@@ -1144,9 +1262,8 @@ def generate_threatscore_report_job(
    2. Checks provider type compatibility
    3. Generates the output directory
    4. Calls generate_threatscore_report to create the PDF
-    5. Computes and stores ThreatScore metrics snapshot
-    6. Uploads the PDF to S3
-    7. Cleans up temporary files
+    5. Uploads the PDF to S3
+    6. Cleans up temporary files

    Args:
        tenant_id (str): The tenant ID for Row-Level Security context.
@@ -1200,66 +1317,6 @@ def generate_threatscore_report_job(
        min_risk_level=4,
    )

-    # Compute and store ThreatScore metrics snapshot
-    logger.info(f"Computing ThreatScore metrics for scan {scan_id}")
-    try:
-        metrics = compute_threatscore_metrics(
-            tenant_id=tenant_id,
-            scan_id=scan_id,
-            provider_id=provider_id,
-            compliance_id=compliance_id,
-            min_risk_level=4,
-        )
-
-        # Create snapshot in database
-        with rls_transaction(tenant_id):
-            # Get previous snapshot for the same provider to calculate delta
-            previous_snapshot = (
-                ThreatScoreSnapshot.objects.filter(
-                    tenant_id=tenant_id,
-                    provider_id=provider_id,
-                    compliance_id=compliance_id,
-                )
-                .order_by("-inserted_at")
-                .first()
-            )
-
-            # Calculate score delta (improvement)
-            score_delta = None
-            if previous_snapshot:
-                score_delta = metrics["overall_score"] - float(
-                    previous_snapshot.overall_score
-                )
-
-            snapshot = ThreatScoreSnapshot.objects.create(
-                tenant_id=tenant_id,
-                scan_id=scan_id,
-                provider_id=provider_id,
-                compliance_id=compliance_id,
-                overall_score=metrics["overall_score"],
-                score_delta=score_delta,
-                section_scores=metrics["section_scores"],
-                critical_requirements=metrics["critical_requirements"],
-                total_requirements=metrics["total_requirements"],
-                passed_requirements=metrics["passed_requirements"],
-                failed_requirements=metrics["failed_requirements"],
-                manual_requirements=metrics["manual_requirements"],
-                total_findings=metrics["total_findings"],
-                passed_findings=metrics["passed_findings"],
-                failed_findings=metrics["failed_findings"],
-            )
-
-            delta_msg = (
-                f" (delta: {score_delta:+.2f}%)" if score_delta is not None else ""
-            )
-            logger.info(
-                f"ThreatScore snapshot created with ID {snapshot.id} "
-                f"(score: {snapshot.overall_score}%{delta_msg})"
-            )
-    except Exception as e:
-        # Log error but don't fail the job if snapshot creation fails
-        logger.error(f"Error creating ThreatScore snapshot: {e}")
-
    upload_uri = _upload_to_s3(
        tenant_id,
        scan_id,
@@ -30,7 +30,6 @@ from api.exceptions import ProviderConnectionError
 from api.models import (
    ComplianceRequirementOverview,
    Finding,
-    MuteRule,
    Processor,
    Provider,
    Resource,
@@ -302,20 +301,6 @@ def perform_prowler_scan(
            logger.error(f"Error processing mutelist rules: {e}")
            mutelist_processor = None

-    # Load enabled mute rules for this tenant
-    with rls_transaction(tenant_id, using=READ_REPLICA_ALIAS):
-        try:
-            active_mute_rules = MuteRule.objects.filter(
-                tenant_id=tenant_id, enabled=True
-            ).values_list("finding_uids", "reason")
-
-            mute_rules_cache = {}
-            for finding_uids, reason in active_mute_rules:
-                for uid in finding_uids:
-                    mute_rules_cache[uid] = reason
-        except Exception as e:
-            logger.error(f"Error loading mute rules: {e}")
-            mute_rules_cache = {}
    try:
        with rls_transaction(tenant_id):
            try:
@@ -464,22 +449,11 @@ def perform_prowler_scan(
                    if not last_first_seen_at:
                        last_first_seen_at = datetime.now(tz=timezone.utc)

-                    # Determine if finding should be muted and why
-                    # Priority: mutelist processor (highest) > manual mute rules
-                    is_muted = False
-                    muted_reason = None
-
-                    # Check mutelist processor first (highest priority)
-                    if finding.muted:
-                        is_muted = True
-                        muted_reason = "Muted by mutelist"
-                    # If not muted by mutelist, check manual mute rules
-                    elif finding_uid in mute_rules_cache:
-                        is_muted = True
-                        muted_reason = mute_rules_cache[finding_uid]
+                    # If the finding is muted at this time the reason must be the configured Mutelist
+                    muted_reason = "Muted by mutelist" if finding.muted else None

                    # Increment failed_findings_count cache if the finding status is FAIL and not muted
-                    if status == FindingStatus.FAIL and not is_muted:
+                    if status == FindingStatus.FAIL and not finding.muted:
                        resource_uid = finding.resource_uid
                        resource_failed_findings_cache[resource_uid] += 1

@@ -498,8 +472,7 @@ def perform_prowler_scan(
                        check_id=finding.check_id,
                        scan=scan_instance,
                        first_seen_at=last_first_seen_at,
-                        muted=is_muted,
-                        muted_at=datetime.now(tz=timezone.utc) if is_muted else None,
+                        muted=finding.muted,
                        muted_reason=muted_reason,
                        compliance=finding.compliance,
                    )
@@ -1,214 +0,0 @@
-from celery.utils.log import get_task_logger
-from tasks.jobs.threatscore_utils import (
-    _aggregate_requirement_statistics_from_database,
-    _calculate_requirements_data_from_statistics,
-)
-
-from api.db_router import READ_REPLICA_ALIAS
-from api.db_utils import rls_transaction
-from api.models import Provider, StatusChoices
-from prowler.lib.check.compliance_models import Compliance
-
-logger = get_task_logger(__name__)
-
-
-def compute_threatscore_metrics(
-    tenant_id: str,
-    scan_id: str,
-    provider_id: str,
-    compliance_id: str,
-    min_risk_level: int = 4,
-) -> dict:
-    """
-    Compute ThreatScore metrics for a given scan.
-
-    This function calculates all the metrics needed for a ThreatScore snapshot:
-    - Overall ThreatScore percentage
-    - Section-by-section scores
-    - Critical failed requirements (risk >= min_risk_level)
-    - Summary statistics (requirements and findings counts)
-
-    Args:
-        tenant_id (str): The tenant ID for Row-Level Security context.
-        scan_id (str): The ID of the scan to analyze.
-        provider_id (str): The ID of the provider used in the scan.
-        compliance_id (str): Compliance framework ID (e.g., "prowler_threatscore_aws").
-        min_risk_level (int): Minimum risk level for critical requirements. Defaults to 4.
-
-    Returns:
-        dict: A dictionary containing:
-            - overall_score (float): Overall ThreatScore percentage (0-100)
-            - section_scores (dict): Section name -> score percentage mapping
-            - critical_requirements (list): List of critical failed requirement dicts
-            - total_requirements (int): Total number of requirements
-            - passed_requirements (int): Number of PASS requirements
-            - failed_requirements (int): Number of FAIL requirements
-            - manual_requirements (int): Number of MANUAL requirements
-            - total_findings (int): Total findings count
-            - passed_findings (int): Passed findings count
-            - failed_findings (int): Failed findings count
-
-    Example:
-        >>> metrics = compute_threatscore_metrics(
-        ...     tenant_id="tenant-123",
-        ...     scan_id="scan-456",
-        ...     provider_id="provider-789",
-        ...     compliance_id="prowler_threatscore_aws"
-        ... )
-        >>> print(f"Overall ThreatScore: {metrics['overall_score']:.2f}%")
-    """
-    # Get provider and compliance information
-    with rls_transaction(tenant_id, using=READ_REPLICA_ALIAS):
-        provider_obj = Provider.objects.get(id=provider_id)
-        provider_type = provider_obj.provider
-
-        frameworks_bulk = Compliance.get_bulk(provider_type)
-        compliance_obj = frameworks_bulk[compliance_id]
-
-    # Aggregate requirement statistics from database
-    requirement_statistics_by_check_id = (
-        _aggregate_requirement_statistics_from_database(tenant_id, scan_id)
-    )
-
-    # Calculate requirements data using aggregated statistics
-    attributes_by_requirement_id, requirements_list = (
-        _calculate_requirements_data_from_statistics(
-            compliance_obj, requirement_statistics_by_check_id
-        )
-    )
-
-    # Initialize metrics
-    overall_numerator = 0
-    overall_denominator = 0
-    overall_has_findings = False
-
-    sections_data = {}
-
-    total_requirements = len(requirements_list)
-    passed_requirements = 0
-    failed_requirements = 0
-    manual_requirements = 0
-    total_findings = 0
-    passed_findings = 0
-    failed_findings = 0
-
-    critical_requirements_list = []
-
-    # Process each requirement
-    for requirement in requirements_list:
-        requirement_id = requirement["id"]
-        requirement_status = requirement["attributes"]["status"]
-        requirement_attributes = attributes_by_requirement_id.get(requirement_id, {})
-
-        # Count requirements by status
-        if requirement_status == StatusChoices.PASS:
-            passed_requirements += 1
-        elif requirement_status == StatusChoices.FAIL:
-            failed_requirements += 1
-        elif requirement_status == StatusChoices.MANUAL:
-            manual_requirements += 1
-
-        # Get findings data
-        req_passed_findings = requirement["attributes"].get("passed_findings", 0)
-        req_total_findings = requirement["attributes"].get("total_findings", 0)
-
-        # Accumulate findings counts
-        total_findings += req_total_findings
-        passed_findings += req_passed_findings
-        failed_findings += req_total_findings - req_passed_findings
-
-        # Skip requirements with no findings
-        if req_total_findings == 0:
-            continue
-
-        overall_has_findings = True
-
-        # Get requirement metadata
-        metadata = requirement_attributes.get("attributes", {}).get(
-            "req_attributes", []
-        )
-        if not metadata or len(metadata) == 0:
-            continue
-
-        m = metadata[0]
-        risk_level = getattr(m, "LevelOfRisk", 0)
-        weight = getattr(m, "Weight", 0)
-        section = getattr(m, "Section", "Unknown")
-
-        # Calculate ThreatScore components using formula from UI
-        rate_i = req_passed_findings / req_total_findings
-        rfac_i = 1 + 0.25 * risk_level
-
-        # Update overall score
-        overall_numerator += rate_i * req_total_findings * weight * rfac_i
-        overall_denominator += req_total_findings * weight * rfac_i
-
-        # Update section scores
-        if section not in sections_data:
-            sections_data[section] = {
-                "numerator": 0,
-                "denominator": 0,
-                "has_findings": False,
-            }
-
-        sections_data[section]["has_findings"] = True
-        sections_data[section]["numerator"] += (
-            rate_i * req_total_findings * weight * rfac_i
-        )
-        sections_data[section]["denominator"] += req_total_findings * weight * rfac_i
-
-        # Identify critical failed requirements
-        if requirement_status == StatusChoices.FAIL and risk_level >= min_risk_level:
-            critical_requirements_list.append(
-                {
-                    "requirement_id": requirement_id,
-                    "title": getattr(m, "Title", "N/A"),
-                    "section": section,
-                    "subsection": getattr(m, "SubSection", "N/A"),
-                    "risk_level": risk_level,
-                    "weight": weight,
-                    "passed_findings": req_passed_findings,
-                    "total_findings": req_total_findings,
-                    "description": getattr(m, "AttributeDescription", "N/A"),
-                }
-            )
-
-    # Calculate overall ThreatScore
-    if not overall_has_findings:
-        overall_score = 100.0
-    elif overall_denominator > 0:
-        overall_score = (overall_numerator / overall_denominator) * 100
-    else:
-        overall_score = 0.0
-
-    # Calculate section scores
-    section_scores = {}
-    for section, data in sections_data.items():
-        if data["has_findings"] and data["denominator"] > 0:
-            section_scores[section] = (data["numerator"] / data["denominator"]) * 100
-        else:
-            section_scores[section] = 100.0
-
-    # Sort critical requirements by risk level (desc) and weight (desc)
-    critical_requirements_list.sort(
-        key=lambda x: (x["risk_level"], x["weight"]), reverse=True
-    )
-
-    logger.info(
-        f"ThreatScore computed: {overall_score:.2f}% "
-        f"({passed_requirements}/{total_requirements} requirements passed, "
-        f"{len(critical_requirements_list)} critical failures)"
-    )
-
-    return {
-        "overall_score": round(overall_score, 2),
-        "section_scores": {k: round(v, 2) for k, v in section_scores.items()},
-        "critical_requirements": critical_requirements_list,
-        "total_requirements": total_requirements,
-        "passed_requirements": passed_requirements,
-        "failed_requirements": failed_requirements,
-        "manual_requirements": manual_requirements,
-        "total_findings": total_findings,
-        "passed_findings": passed_findings,
-        "failed_findings": failed_findings,
-    }
@@ -1,127 +0,0 @@
-from celery.utils.log import get_task_logger
-from django.db.models import Count, Q
-
-from api.db_router import READ_REPLICA_ALIAS
-from api.db_utils import rls_transaction
-from api.models import Finding, StatusChoices
-
-logger = get_task_logger(__name__)
-
-
-def _aggregate_requirement_statistics_from_database(
-    tenant_id: str, scan_id: str
-) -> dict[str, dict[str, int]]:
-    """
-    Aggregate finding statistics by check_id using database aggregation.
-
-    This function uses Django ORM aggregation to calculate pass/fail statistics
-    entirely in the database, avoiding the need to load findings into memory.
-
-    Args:
-        tenant_id (str): The tenant ID for Row-Level Security context.
-        scan_id (str): The ID of the scan to retrieve findings for.
-
-    Returns:
-        dict[str, dict[str, int]]: Dictionary mapping check_id to statistics:
-            - 'passed' (int): Number of passed findings for this check
-            - 'total' (int): Total number of findings for this check
-
-    Example:
-        {
-            'aws_iam_user_mfa_enabled': {'passed': 10, 'total': 15},
-            'aws_s3_bucket_public_access': {'passed': 0, 'total': 5}
-        }
-    """
-    requirement_statistics_by_check_id = {}
-
-    with rls_transaction(tenant_id, using=READ_REPLICA_ALIAS):
-        aggregated_statistics_queryset = (
-            Finding.all_objects.filter(tenant_id=tenant_id, scan_id=scan_id)
-            .values("check_id")
-            .annotate(
-                total_findings=Count("id"),
-                passed_findings=Count("id", filter=Q(status=StatusChoices.PASS)),
-            )
-        )
-
-        for aggregated_stat in aggregated_statistics_queryset:
-            check_id = aggregated_stat["check_id"]
-            requirement_statistics_by_check_id[check_id] = {
-                "passed": aggregated_stat["passed_findings"],
-                "total": aggregated_stat["total_findings"],
-            }
-
-    logger.info(
-        f"Aggregated statistics for {len(requirement_statistics_by_check_id)} unique checks"
-    )
-    return requirement_statistics_by_check_id
-
-
-def _calculate_requirements_data_from_statistics(
-    compliance_obj, requirement_statistics_by_check_id: dict[str, dict[str, int]]
-) -> tuple[dict[str, dict], list[dict]]:
-    """
-    Calculate requirement status and statistics using pre-aggregated database statistics.
-
-    Args:
-        compliance_obj: The compliance framework object containing requirements.
-        requirement_statistics_by_check_id (dict[str, dict[str, int]]): Pre-aggregated statistics
-            mapping check_id to {'passed': int, 'total': int} counts.
-
-    Returns:
-        tuple[dict[str, dict], list[dict]]: A tuple containing:
-            - attributes_by_requirement_id: Dictionary mapping requirement IDs to their attributes.
-            - requirements_list: List of requirement dictionaries with status and statistics.
-    """
-    attributes_by_requirement_id = {}
-    requirements_list = []
-
-    compliance_framework = getattr(compliance_obj, "Framework", "N/A")
-    compliance_version = getattr(compliance_obj, "Version", "N/A")
-
-    for requirement in compliance_obj.Requirements:
-        requirement_id = requirement.Id
-        requirement_description = getattr(requirement, "Description", "")
-        requirement_checks = getattr(requirement, "Checks", [])
-        requirement_attributes = getattr(requirement, "Attributes", [])
-
-        attributes_by_requirement_id[requirement_id] = {
-            "attributes": {
-                "req_attributes": requirement_attributes,
-                "checks": requirement_checks,
-            },
-            "description": requirement_description,
-        }
-
-        total_passed_findings = 0
-        total_findings_count = 0
-
-        for check_id in requirement_checks:
-            if check_id in requirement_statistics_by_check_id:
-                check_statistics = requirement_statistics_by_check_id[check_id]
-                total_findings_count += check_statistics["total"]
-                total_passed_findings += check_statistics["passed"]
-
-        if total_findings_count > 0:
-            if total_passed_findings == total_findings_count:
-                requirement_status = StatusChoices.PASS
-            else:
-                requirement_status = StatusChoices.FAIL
-        else:
-            requirement_status = StatusChoices.MANUAL
-
-        requirements_list.append(
-            {
-                "id": requirement_id,
-                "attributes": {
-                    "framework": compliance_framework,
-                    "version": compliance_version,
-                    "status": requirement_status,
-                    "description": requirement_description,
-                    "passed_findings": total_passed_findings,
-                    "total_findings": total_findings_count,
-                },
-            }
-        )
-
-    return attributes_by_requirement_id, requirements_list
@@ -27,11 +27,6 @@ from tasks.jobs.integrations import (
    upload_s3_integration,
    upload_security_hub_integration,
 )
-from tasks.jobs.lighthouse_providers import (
-    check_lighthouse_provider_connection,
-    refresh_lighthouse_provider_models,
-)
-from tasks.jobs.muting import mute_historical_findings
 from tasks.jobs.report import generate_threatscore_report_job
 from tasks.jobs.scan import (
    aggregate_findings,
@@ -529,24 +524,6 @@ def check_lighthouse_connection_task(lighthouse_config_id: str, tenant_id: str =
    return check_lighthouse_connection(lighthouse_config_id=lighthouse_config_id)


-@shared_task(base=RLSTask, name="lighthouse-provider-connection-check")
-@set_tenant
-def check_lighthouse_provider_connection_task(
-    provider_config_id: str, tenant_id: str | None = None
-) -> dict:
-    """Task wrapper to validate provider credentials and set is_active."""
-    return check_lighthouse_provider_connection(provider_config_id=provider_config_id)
-
-
-@shared_task(base=RLSTask, name="lighthouse-provider-models-refresh")
-@set_tenant
-def refresh_lighthouse_provider_models_task(
-    provider_config_id: str, tenant_id: str | None = None
-) -> dict:
-    """Task wrapper to refresh provider models catalog for the given configuration."""
-    return refresh_lighthouse_provider_models(provider_config_id=provider_config_id)
-
-
@shared_task(name="integration-check")
 def check_integrations_task(tenant_id: str, provider_id: str, scan_id: str = None):
    """
@@ -682,25 +659,3 @@ def generate_threatscore_report_task(tenant_id: str, scan_id: str, provider_id:
    return generate_threatscore_report_job(
        tenant_id=tenant_id, scan_id=scan_id, provider_id=provider_id
    )
-
-
-@shared_task(name="findings-mute-historical")
-def mute_historical_findings_task(tenant_id: str, mute_rule_id: str):
-    """
-    Background task to mute all historical findings matching a mute rule.
-
-    This task processes findings in batches to avoid memory issues with large datasets.
-    It updates the Finding.muted, Finding.muted_at, and Finding.muted_reason fields
-    for all findings whose UID is in the mute rule's finding_uids list.
-
-    Args:
-        tenant_id (str): The tenant ID for RLS context.
-        mute_rule_id (str): The primary key of the MuteRule to apply.
-
-    Returns:
-        dict: A dictionary containing:
-            - 'findings_muted' (int): Total number of findings muted.
-            - 'rule_id' (str): The mute rule ID.
-            - 'status' (str): Final status ('completed').
-    """
-    return mute_historical_findings(tenant_id, mute_rule_id)
@@ -1,532 +0,0 @@
-from datetime import datetime, timezone
-from uuid import uuid4
-
-import pytest
-from django.core.exceptions import ObjectDoesNotExist
-from tasks.jobs.muting import mute_historical_findings
-
-from api.models import Finding, MuteRule
-from prowler.lib.check.models import Severity
-from prowler.lib.outputs.finding import Status
-
-
-@pytest.mark.django_db
-class TestMuteHistoricalFindings:
-    """
-    Test suite for the mute_historical_findings function.
-
-    This class tests the batch processing of findings to update their muted status
-    based on MuteRule criteria.
-    """
-
-    @pytest.fixture(scope="function")
-    def test_user(self, create_test_user):
-        """Create a test user for mute rule creation."""
-        return create_test_user
-
-    @pytest.fixture(scope="function")
-    def mute_rule_with_findings(self, tenants_fixture, findings_fixture, test_user):
-        """
-        Create a mute rule that targets the first finding in the fixture.
-        """
-        tenant = tenants_fixture[0]
-        finding = findings_fixture[0]
-
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant.id,
-            name="Test Mute Rule",
-            reason="Testing mute functionality",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[finding.uid],
-        )
-
-        return mute_rule
-
-    @pytest.fixture(scope="function")
-    def mute_rule_multiple_findings(self, scans_fixture, test_user):
-        """
-        Create multiple unmuted findings and a mute rule targeting all of them.
-        """
-        scan = scans_fixture[0]
-        tenant_id = scan.tenant_id
-
-        # Create 5 unmuted findings
-        finding_uids = []
-        for i in range(5):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"test_finding_uid_mute_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Test status {i}",
-                impact=Severity.high,
-                severity=Severity.high,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.high,
-                    "severity": Severity.high,
-                },
-                check_id=f"test_check_id_{i}",
-                check_metadata={
-                    "CheckId": f"test_check_id_{i}",
-                    "Description": f"Test description {i}",
-                },
-                muted=False,
-            )
-            finding_uids.append(finding.uid)
-
-        # Create mute rule targeting all findings
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Multiple Findings Mute Rule",
-            reason="Testing batch muting",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=finding_uids,
-        )
-
-        return mute_rule, finding_uids
-
-    @pytest.fixture(scope="function")
-    def mute_rule_already_muted(self, findings_fixture, test_user):
-        """
-        Create a mute rule that targets an already-muted finding.
-        """
-        tenant_id = findings_fixture[1].tenant_id
-        already_muted_finding = findings_fixture[1]
-
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Already Muted Rule",
-            reason="Testing already muted findings",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[already_muted_finding.uid],
-        )
-
-        return mute_rule
-
-    @pytest.fixture(scope="function")
-    def mute_rule_mixed_findings(self, scans_fixture, test_user):
-        """
-        Create a mute rule with a mix of muted and unmuted findings.
-        """
-        scan = scans_fixture[0]
-        tenant_id = scan.tenant_id
-
-        # Create 3 unmuted findings
-        unmuted_uids = []
-        for i in range(3):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"unmuted_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Unmuted status {i}",
-                impact=Severity.medium,
-                severity=Severity.medium,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.medium,
-                    "severity": Severity.medium,
-                },
-                check_id=f"unmuted_check_{i}",
-                check_metadata={
-                    "CheckId": f"unmuted_check_{i}",
-                    "Description": f"Unmuted description {i}",
-                },
-                muted=False,
-            )
-            unmuted_uids.append(finding.uid)
-
-        # Create 2 already muted findings
-        muted_uids = []
-        for i in range(2):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"muted_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Muted status {i}",
-                impact=Severity.low,
-                severity=Severity.low,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.low,
-                    "severity": Severity.low,
-                },
-                check_id=f"muted_check_{i}",
-                check_metadata={
-                    "CheckId": f"muted_check_{i}",
-                    "Description": f"Muted description {i}",
-                },
-                muted=True,
-                muted_at=datetime.now(timezone.utc),
-                muted_reason="Already muted",
-            )
-            muted_uids.append(finding.uid)
-
-        # Create mute rule targeting all findings
-        all_uids = unmuted_uids + muted_uids
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Mixed Findings Rule",
-            reason="Testing mixed muted/unmuted findings",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=all_uids,
-        )
-
-        return mute_rule, unmuted_uids, muted_uids
-
-    @pytest.fixture(scope="function")
-    def mute_rule_batch_test(self, scans_fixture, test_user):
-        """
-        Create enough findings to test batch processing (>1000 for default batch size).
-        """
-        scan = scans_fixture[0]
-        tenant_id = scan.tenant_id
-
-        # Create 1500 findings to exceed default batch size of 1000
-        finding_uids = []
-        for i in range(1500):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"batch_test_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Batch test status {i}",
-                impact=Severity.critical,
-                severity=Severity.critical,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.critical,
-                    "severity": Severity.critical,
-                },
-                check_id=f"batch_test_check_{i}",
-                check_metadata={
-                    "CheckId": f"batch_test_check_{i}",
-                    "Description": f"Batch test description {i}",
-                },
-                muted=False,
-            )
-            finding_uids.append(finding.uid)
-
-        # Create mute rule targeting all findings
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Batch Processing Rule",
-            reason="Testing batch processing functionality",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=finding_uids,
-        )
-
-        return mute_rule, finding_uids
-
-    def test_mute_historical_findings_single_finding(
-        self, mute_rule_with_findings, findings_fixture
-    ):
-        """
-        Test muting a single historical finding.
-        """
-        mute_rule = mute_rule_with_findings
-        tenant_id = str(mute_rule.tenant_id)
-        finding = findings_fixture[0]
-
-        # Ensure the finding is not muted before execution
-        finding.refresh_from_db()
-        assert finding.muted is False
-        assert finding.muted_at is None
-        assert finding.muted_reason is None
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value
-        assert result["findings_muted"] == 1
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify the finding was muted
-        finding.refresh_from_db()
-        assert finding.muted is True
-        assert finding.muted_at == mute_rule.inserted_at
-        assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_multiple_findings(
-        self, mute_rule_multiple_findings
-    ):
-        """
-        Test muting multiple historical findings.
-        """
-        mute_rule, finding_uids = mute_rule_multiple_findings
-        tenant_id = str(mute_rule.tenant_id)
-
-        # Verify all findings are unmuted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        assert findings.count() == 5
-        for finding in findings:
-            assert finding.muted is False
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value
-        assert result["findings_muted"] == 5
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify all findings were muted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        for finding in findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_already_muted(
-        self, mute_rule_already_muted, findings_fixture
-    ):
-        """
-        Test that already-muted findings are not counted or updated.
-        """
-        mute_rule = mute_rule_already_muted
-        tenant_id = str(mute_rule.tenant_id)
-        finding = findings_fixture[1]
-
-        # Verify the finding is already muted
-        finding.refresh_from_db()
-        assert finding.muted is True
-        original_muted_at = finding.muted_at
-        original_muted_reason = finding.muted_reason
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify no findings were muted
-        assert result["findings_muted"] == 0
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify the finding's mute status did not change
-        finding.refresh_from_db()
-        assert finding.muted is True
-        assert finding.muted_at == original_muted_at
-        assert finding.muted_reason == original_muted_reason
-
-    def test_mute_historical_findings_mixed_status(self, mute_rule_mixed_findings):
-        """
-        Test muting when some findings are already muted and others are not.
-        """
-        mute_rule, unmuted_uids, muted_uids = mute_rule_mixed_findings
-        tenant_id = str(mute_rule.tenant_id)
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify only unmuted findings were counted
-        assert result["findings_muted"] == 3
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify unmuted findings are now muted
-        unmuted_findings = Finding.objects.filter(
-            tenant_id=tenant_id, uid__in=unmuted_uids
-        )
-        for finding in unmuted_findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-        # Verify already-muted findings remained unchanged
-        already_muted_findings = Finding.objects.filter(
-            tenant_id=tenant_id, uid__in=muted_uids
-        )
-        for finding in already_muted_findings:
-            assert finding.muted is True
-            assert finding.muted_reason == "Already muted"
-
-    def test_mute_historical_findings_nonexistent_rule(self, tenants_fixture):
-        """
-        Test that a nonexistent mute rule raises ObjectDoesNotExist.
-        """
-        tenant_id = str(tenants_fixture[0].id)
-        nonexistent_rule_id = str(uuid4())
-
-        with pytest.raises(ObjectDoesNotExist):
-            mute_historical_findings(tenant_id, nonexistent_rule_id)
-
-    def test_mute_historical_findings_no_matching_findings(
-        self, tenants_fixture, test_user
-    ):
-        """
-        Test muting when no findings match the rule's UIDs.
-        """
-        tenant_id = str(tenants_fixture[0].id)
-
-        # Create a mute rule with non-existent finding UIDs
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test No Match Rule",
-            reason="Testing no matching findings",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[
-                "nonexistent_uid_1",
-                "nonexistent_uid_2",
-                "nonexistent_uid_3",
-            ],
-        )
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify no findings were muted
-        assert result["findings_muted"] == 0
-        assert result["rule_id"] == str(mute_rule.id)
-
-    def test_mute_historical_findings_batch_processing(self, mute_rule_batch_test):
-        """
-        Test that large numbers of findings are processed in batches correctly.
-        """
-        mute_rule, finding_uids = mute_rule_batch_test
-        tenant_id = str(mute_rule.tenant_id)
-
-        # Verify all findings exist and are unmuted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        assert findings.count() == 1500
-        for finding in findings:
-            assert finding.muted is False
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value
-        assert result["findings_muted"] == 1500
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify all findings were muted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        for finding in findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_preserves_muted_at_timestamp(
-        self, mute_rule_with_findings, findings_fixture
-    ):
-        """
-        Test that muted_at is set to the rule's inserted_at, not the current time.
-        """
-        mute_rule = mute_rule_with_findings
-        tenant_id = str(mute_rule.tenant_id)
-        finding = findings_fixture[0]
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify the finding was muted
-        assert result["findings_muted"] == 1
-
-        # Verify muted_at matches the rule's inserted_at timestamp
-        finding.refresh_from_db()
-        assert finding.muted_at == mute_rule.inserted_at
-        assert finding.muted_at is not None
-
-    def test_mute_historical_findings_partial_match(self, scans_fixture, test_user):
-        """
-        Test muting when only some of the rule's UIDs exist as findings.
-        """
-        scan = scans_fixture[0]
-        tenant_id = str(scan.tenant_id)
-
-        # Create 3 findings
-        existing_uids = []
-        for i in range(3):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"partial_match_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Partial match status {i}",
-                impact=Severity.high,
-                severity=Severity.high,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.high,
-                    "severity": Severity.high,
-                },
-                check_id=f"partial_match_check_{i}",
-                check_metadata={
-                    "CheckId": f"partial_match_check_{i}",
-                    "Description": f"Partial match description {i}",
-                },
-                muted=False,
-            )
-            existing_uids.append(finding.uid)
-
-        # Create a mute rule with both existing and non-existing UIDs
-        all_uids = existing_uids + [
-            "nonexistent_uid_1",
-            "nonexistent_uid_2",
-        ]
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Partial Match Rule",
-            reason="Testing partial matching",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=all_uids,
-        )
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify only existing findings were muted
-        assert result["findings_muted"] == 3
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify the existing findings were muted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=existing_uids)
-        assert findings.count() == 3
-        for finding in findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_empty_uids(self, tenants_fixture, test_user):
-        """
-        Test muting when the rule has an empty finding_uids array.
-        """
-        tenant_id = str(tenants_fixture[0].id)
-
-        # Create a mute rule with empty finding_uids
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Empty UIDs Rule",
-            reason="Testing empty UIDs",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[],
-        )
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify no findings were muted
-        assert result["findings_muted"] == 0
-        assert result["rule_id"] == str(mute_rule.id)
-
-    def test_mute_historical_findings_return_format(self, mute_rule_with_findings):
-        """
-        Test that the return value has the correct format and fields.
-        """
-        mute_rule = mute_rule_with_findings
-        tenant_id = str(mute_rule.tenant_id)
-
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value structure
-        assert isinstance(result, dict)
-        assert "findings_muted" in result
-        assert "rule_id" in result
-        assert isinstance(result["findings_muted"], int)
-        assert isinstance(result["rule_id"], str)
-        assert result["rule_id"] == str(mute_rule.id)
@@ -1,25 +1,19 @@
 import uuid
-from datetime import timedelta
-from decimal import Decimal
 from pathlib import Path
 from unittest.mock import MagicMock, patch

 import matplotlib
 import pytest
-from django.utils import timezone
-from freezegun import freeze_time
 from tasks.jobs.report import (
+    _aggregate_requirement_statistics_from_database,
+    _calculate_requirements_data_from_statistics,
    _load_findings_for_requirement_checks,
    generate_threatscore_report,
    generate_threatscore_report_job,
 )
-from tasks.jobs.threatscore_utils import (
-    _aggregate_requirement_statistics_from_database,
-    _calculate_requirements_data_from_statistics,
-)
 from tasks.tasks import generate_threatscore_report_task

-from api.models import Finding, Scan, StateChoices, StatusChoices, ThreatScoreSnapshot
+from api.models import Finding, StatusChoices
 from prowler.lib.check.models import Severity

 matplotlib.use("Agg")  # Use non-interactive backend for tests
@@ -45,7 +39,6 @@ class TestGenerateThreatscoreReport:
            assert result == {"upload": False}
            mock_filter.assert_called_once_with(scan_id=self.scan_id)

-    @patch("tasks.jobs.report.ThreatScoreSnapshot.objects.create")
    @patch("tasks.jobs.report.rmtree")
    @patch("tasks.jobs.report._upload_to_s3")
    @patch("tasks.jobs.report.generate_threatscore_report")
@@ -60,7 +53,6 @@ class TestGenerateThreatscoreReport:
        mock_generate_report,
        mock_upload,
        mock_rmtree,
-        mock_snapshot_create,
    ):
        mock_scan_summary_filter.return_value.exists.return_value = True

@@ -103,10 +95,8 @@ class TestGenerateThreatscoreReport:
            Path("/tmp/threatscore_path_threatscore_report.pdf").parent,
            ignore_errors=True,
        )
-        mock_snapshot_create.assert_called_once()

-    @patch("tasks.jobs.report.ThreatScoreSnapshot.objects.create")
-    def test_generate_threatscore_report_fails_upload(self, mock_snapshot_create):
+    def test_generate_threatscore_report_fails_upload(self):
        with (
            patch("tasks.jobs.report.ScanSummary.objects.filter") as mock_filter,
            patch("tasks.jobs.report.Provider.objects.get") as mock_provider_get,
@@ -135,12 +125,8 @@ class TestGenerateThreatscoreReport:
            )

            assert result == {"upload": False}
-            mock_snapshot_create.assert_called_once()

-    @patch("tasks.jobs.report.ThreatScoreSnapshot.objects.create")
-    def test_generate_threatscore_report_logs_rmtree_exception(
-        self, mock_snapshot_create, caplog
-    ):
+    def test_generate_threatscore_report_logs_rmtree_exception(self, caplog):
        with (
            patch("tasks.jobs.report.ScanSummary.objects.filter") as mock_filter,
            patch("tasks.jobs.report.Provider.objects.get") as mock_provider_get,
@@ -174,10 +160,8 @@ class TestGenerateThreatscoreReport:
                    provider_id=self.provider_id,
                )
                assert "Error deleting output files" in caplog.text
-                mock_snapshot_create.assert_called_once()

-    @patch("tasks.jobs.report.ThreatScoreSnapshot.objects.create")
-    def test_generate_threatscore_report_azure_provider(self, mock_snapshot_create):
+    def test_generate_threatscore_report_azure_provider(self):
        with (
            patch("tasks.jobs.report.ScanSummary.objects.filter") as mock_filter,
            patch("tasks.jobs.report.Provider.objects.get") as mock_provider_get,
@@ -216,135 +200,6 @@ class TestGenerateThreatscoreReport:
                only_failed=True,
                min_risk_level=4,
            )
-            mock_snapshot_create.assert_called_once()
-
-    @patch("tasks.jobs.report.rmtree")
-    @patch(
-        "tasks.jobs.report._upload_to_s3",
-        return_value="s3://bucket/threatscore/threatscore_report.pdf",
-    )
-    @patch("tasks.jobs.report.generate_threatscore_report")
-    @patch("tasks.jobs.report._generate_output_directory")
-    @patch("tasks.jobs.report.ScanSummary.objects.filter")
-    @patch("tasks.jobs.report.compute_threatscore_metrics")
-    @pytest.mark.django_db
-    @freeze_time("2025-01-10T12:00:00Z")
-    def test_generate_threatscore_report_persists_snapshot_and_delta(
-        self,
-        mock_compute_metrics,
-        mock_scan_summary_filter,
-        mock_generate_output_directory,
-        mock_generate_report,
-        mock_upload,
-        mock_rmtree,
-        tenants_fixture,
-        providers_fixture,
-    ):
-        tenant = tenants_fixture[0]
-        provider = providers_fixture[0]
-
-        scan_previous = Scan.objects.create(
-            tenant=tenant,
-            provider=provider,
-            name="previous-threatscore-scan",
-            trigger=Scan.TriggerChoices.MANUAL,
-            state=StateChoices.COMPLETED,
-            started_at=timezone.now() - timedelta(hours=4),
-            completed_at=timezone.now() - timedelta(hours=3),
-        )
-        ThreatScoreSnapshot.objects.create(
-            tenant=tenant,
-            scan=scan_previous,
-            provider=provider,
-            compliance_id="prowler_threatscore_aws",
-            overall_score=Decimal("70.00"),
-            score_delta=None,
-            section_scores={"1. IAM": "65.00"},
-            critical_requirements=[],
-            total_requirements=50,
-            passed_requirements=35,
-            failed_requirements=15,
-            manual_requirements=0,
-            total_findings=40,
-            passed_findings=25,
-            failed_findings=15,
-        )
-
-        scan_current = Scan.objects.create(
-            tenant=tenant,
-            provider=provider,
-            name="current-threatscore-scan",
-            trigger=Scan.TriggerChoices.MANUAL,
-            state=StateChoices.COMPLETED,
-            started_at=timezone.now() - timedelta(hours=2),
-            completed_at=timezone.now() - timedelta(hours=1),
-        )
-
-        mock_scan_summary_filter.return_value.exists.return_value = True
-        mock_generate_output_directory.return_value = (
-            "/tmp/output",
-            "/tmp/compressed",
-            "/tmp/threatscore_path",
-        )
-
-        metrics = {
-            "overall_score": 85.5,
-            "score_delta": 10.0,
-            "section_scores": {"1. IAM": 82.3, "2. Attack Surface": 60.0},
-            "critical_requirements": [
-                {
-                    "requirement_id": "req_new",
-                    "title": "New high-risk requirement",
-                    "section": "1. IAM",
-                    "subsection": "Root Account",
-                    "risk_level": 5,
-                    "weight": 150,
-                    "passed_findings": 7,
-                    "total_findings": 10,
-                    "description": "Critical requirement description",
-                }
-            ],
-            "total_requirements": 140,
-            "passed_requirements": 100,
-            "failed_requirements": 40,
-            "manual_requirements": 0,
-            "total_findings": 200,
-            "passed_findings": 150,
-            "failed_findings": 50,
-        }
-        mock_compute_metrics.return_value = metrics
-
-        result = generate_threatscore_report_job(
-            tenant_id=str(tenant.id),
-            scan_id=str(scan_current.id),
-            provider_id=str(provider.id),
-        )
-
-        assert result == {"upload": True}
-        mock_compute_metrics.assert_called_once_with(
-            tenant_id=str(tenant.id),
-            scan_id=str(scan_current.id),
-            provider_id=str(provider.id),
-            compliance_id="prowler_threatscore_aws",
-            min_risk_level=4,
-        )
-        mock_generate_report.assert_called_once()
-        mock_upload.assert_called_once()
-        mock_rmtree.assert_called_once()
-
-        snapshots = ThreatScoreSnapshot.objects.filter(
-            tenant=tenant, provider=provider
-        ).order_by("inserted_at")
-        assert snapshots.count() == 2
-
-        new_snapshot = ThreatScoreSnapshot.objects.get(scan=scan_current)
-        assert new_snapshot.compliance_id == "prowler_threatscore_aws"
-        assert Decimal(new_snapshot.overall_score) == Decimal("85.50")
-        assert Decimal(new_snapshot.score_delta) == Decimal("15.50")
-        assert new_snapshot.section_scores == metrics["section_scores"]
-        assert new_snapshot.critical_requirements == metrics["critical_requirements"]
-        assert new_snapshot.total_requirements == metrics["total_requirements"]
-        assert new_snapshot.total_findings == metrics["total_findings"]


@pytest.mark.django_db
@@ -18,15 +18,7 @@ from tasks.utils import CustomEncoder

 from api.db_router import MainRouter
 from api.exceptions import ProviderConnectionError
-from api.models import (
-    Finding,
-    MuteRule,
-    Provider,
-    Resource,
-    Scan,
-    StateChoices,
-    StatusChoices,
-)
+from api.models import Finding, Provider, Resource, Scan, StateChoices, StatusChoices
 from prowler.lib.check.models import Severity


@@ -747,561 +739,6 @@ class TestPerformScan:
        # Assert that failed_findings_count was reset to 0 during the scan
        assert resource.failed_findings_count == 0

-    def test_perform_prowler_scan_with_active_mute_rules(
-        self,
-        tenants_fixture,
-        scans_fixture,
-        providers_fixture,
-    ):
-        """Test active MuteRule mutes findings with correct reason"""
-        with (
-            patch("api.db_utils.rls_transaction"),
-            patch(
-                "tasks.jobs.scan.initialize_prowler_provider"
-            ) as mock_initialize_prowler_provider,
-            patch("tasks.jobs.scan.ProwlerScan") as mock_prowler_scan_class,
-            patch(
-                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE",
-                new_callable=dict,
-            ),
-            patch("api.compliance.PROWLER_CHECKS", new_callable=dict),
-        ):
-            tenant = tenants_fixture[0]
-            scan = scans_fixture[0]
-            provider = providers_fixture[0]
-
-            provider.provider = Provider.ProviderChoices.AWS
-            provider.save()
-
-            tenant_id = str(tenant.id)
-            scan_id = str(scan.id)
-            provider_id = str(provider.id)
-
-            # Create active MuteRule with specific finding UIDs
-            mute_rule_reason = "Accepted risk - production exception"
-            finding_uid_1 = "finding_to_mute_1"
-            finding_uid_2 = "finding_to_mute_2"
-
-            MuteRule.objects.create(
-                tenant_id=tenant_id,
-                name="Production Exception Rule",
-                reason=mute_rule_reason,
-                enabled=True,
-                finding_uids=[finding_uid_1, finding_uid_2],
-            )
-
-            # Mock findings: one FAIL and one PASS, both should be muted
-            muted_fail_finding = MagicMock()
-            muted_fail_finding.uid = finding_uid_1
-            muted_fail_finding.status = StatusChoices.FAIL
-            muted_fail_finding.status_extended = "muted fail"
-            muted_fail_finding.severity = Severity.high
-            muted_fail_finding.check_id = "muted_fail_check"
-            muted_fail_finding.get_metadata.return_value = {"key": "value"}
-            muted_fail_finding.resource_uid = "resource_uid_1"
-            muted_fail_finding.resource_name = "resource_1"
-            muted_fail_finding.region = "us-east-1"
-            muted_fail_finding.service_name = "ec2"
-            muted_fail_finding.resource_type = "instance"
-            muted_fail_finding.resource_tags = {}
-            muted_fail_finding.muted = False
-            muted_fail_finding.raw = {}
-            muted_fail_finding.resource_metadata = {}
-            muted_fail_finding.resource_details = {}
-            muted_fail_finding.partition = "aws"
-            muted_fail_finding.compliance = {}
-
-            muted_pass_finding = MagicMock()
-            muted_pass_finding.uid = finding_uid_2
-            muted_pass_finding.status = StatusChoices.PASS
-            muted_pass_finding.status_extended = "muted pass"
-            muted_pass_finding.severity = Severity.medium
-            muted_pass_finding.check_id = "muted_pass_check"
-            muted_pass_finding.get_metadata.return_value = {"key": "value"}
-            muted_pass_finding.resource_uid = "resource_uid_2"
-            muted_pass_finding.resource_name = "resource_2"
-            muted_pass_finding.region = "us-east-1"
-            muted_pass_finding.service_name = "s3"
-            muted_pass_finding.resource_type = "bucket"
-            muted_pass_finding.resource_tags = {}
-            muted_pass_finding.muted = False
-            muted_pass_finding.raw = {}
-            muted_pass_finding.resource_metadata = {}
-            muted_pass_finding.resource_details = {}
-            muted_pass_finding.partition = "aws"
-            muted_pass_finding.compliance = {}
-
-            # Mock the ProwlerScan instance
-            mock_prowler_scan_instance = MagicMock()
-            mock_prowler_scan_instance.scan.return_value = [
-                (100, [muted_fail_finding, muted_pass_finding])
-            ]
-            mock_prowler_scan_class.return_value = mock_prowler_scan_instance
-
-            # Mock prowler_provider
-            mock_prowler_provider_instance = MagicMock()
-            mock_prowler_provider_instance.get_regions.return_value = ["us-east-1"]
-            mock_initialize_prowler_provider.return_value = (
-                mock_prowler_provider_instance
-            )
-
-            # Call the function under test
-            perform_prowler_scan(tenant_id, scan_id, provider_id, [])
-
-        # Verify findings are muted with correct reason
-        fail_finding_db = Finding.objects.get(uid=finding_uid_1)
-        pass_finding_db = Finding.objects.get(uid=finding_uid_2)
-
-        assert fail_finding_db.muted
-        assert fail_finding_db.muted_reason == mute_rule_reason
-        assert fail_finding_db.muted_at is not None
-
-        assert pass_finding_db.muted
-        assert pass_finding_db.muted_reason == mute_rule_reason
-        assert pass_finding_db.muted_at is not None
-
-        # Verify failed_findings_count is 0 for muted FAIL finding
-        resource_1 = Resource.objects.get(uid="resource_uid_1")
-        assert resource_1.failed_findings_count == 0
-
-    def test_perform_prowler_scan_with_inactive_mute_rules(
-        self,
-        tenants_fixture,
-        scans_fixture,
-        providers_fixture,
-    ):
-        """Test inactive MuteRule does not mute findings"""
-        with (
-            patch("api.db_utils.rls_transaction"),
-            patch(
-                "tasks.jobs.scan.initialize_prowler_provider"
-            ) as mock_initialize_prowler_provider,
-            patch("tasks.jobs.scan.ProwlerScan") as mock_prowler_scan_class,
-            patch(
-                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE",
-                new_callable=dict,
-            ),
-            patch("api.compliance.PROWLER_CHECKS", new_callable=dict),
-        ):
-            tenant = tenants_fixture[0]
-            scan = scans_fixture[0]
-            provider = providers_fixture[0]
-
-            provider.provider = Provider.ProviderChoices.AWS
-            provider.save()
-
-            tenant_id = str(tenant.id)
-            scan_id = str(scan.id)
-            provider_id = str(provider.id)
-
-            # Create inactive MuteRule
-            finding_uid = "finding_inactive_rule"
-            MuteRule.objects.create(
-                tenant_id=tenant_id,
-                name="Inactive Rule",
-                reason="Should not apply",
-                enabled=False,
-                finding_uids=[finding_uid],
-            )
-
-            # Mock FAIL finding
-            fail_finding = MagicMock()
-            fail_finding.uid = finding_uid
-            fail_finding.status = StatusChoices.FAIL
-            fail_finding.status_extended = "test fail"
-            fail_finding.severity = Severity.high
-            fail_finding.check_id = "fail_check"
-            fail_finding.get_metadata.return_value = {"key": "value"}
-            fail_finding.resource_uid = "resource_uid_inactive"
-            fail_finding.resource_name = "resource_inactive"
-            fail_finding.region = "us-east-1"
-            fail_finding.service_name = "ec2"
-            fail_finding.resource_type = "instance"
-            fail_finding.resource_tags = {}
-            fail_finding.muted = False
-            fail_finding.raw = {}
-            fail_finding.resource_metadata = {}
-            fail_finding.resource_details = {}
-            fail_finding.partition = "aws"
-            fail_finding.compliance = {}
-
-            # Mock the ProwlerScan instance
-            mock_prowler_scan_instance = MagicMock()
-            mock_prowler_scan_instance.scan.return_value = [(100, [fail_finding])]
-            mock_prowler_scan_class.return_value = mock_prowler_scan_instance
-
-            # Mock prowler_provider
-            mock_prowler_provider_instance = MagicMock()
-            mock_prowler_provider_instance.get_regions.return_value = ["us-east-1"]
-            mock_initialize_prowler_provider.return_value = (
-                mock_prowler_provider_instance
-            )
-
-            # Call the function under test
-            perform_prowler_scan(tenant_id, scan_id, provider_id, [])
-
-        # Verify finding is NOT muted
-        finding_db = Finding.objects.get(uid=finding_uid)
-        assert not finding_db.muted
-        assert finding_db.muted_reason is None
-        assert finding_db.muted_at is None
-
-        # Verify failed_findings_count increments for FAIL finding
-        resource = Resource.objects.get(uid="resource_uid_inactive")
-        assert resource.failed_findings_count == 1
-
-    def test_perform_prowler_scan_mutelist_overrides_mute_rules(
-        self,
-        tenants_fixture,
-        scans_fixture,
-        providers_fixture,
-    ):
-        """Test mutelist processor takes precedence over MuteRule"""
-        with (
-            patch("api.db_utils.rls_transaction"),
-            patch(
-                "tasks.jobs.scan.initialize_prowler_provider"
-            ) as mock_initialize_prowler_provider,
-            patch("tasks.jobs.scan.ProwlerScan") as mock_prowler_scan_class,
-            patch(
-                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE",
-                new_callable=dict,
-            ),
-            patch("api.compliance.PROWLER_CHECKS", new_callable=dict),
-        ):
-            tenant = tenants_fixture[0]
-            scan = scans_fixture[0]
-            provider = providers_fixture[0]
-
-            provider.provider = Provider.ProviderChoices.AWS
-            provider.save()
-
-            tenant_id = str(tenant.id)
-            scan_id = str(scan.id)
-            provider_id = str(provider.id)
-
-            # Create active MuteRule
-            finding_uid = "finding_both_rules"
-            MuteRule.objects.create(
-                tenant_id=tenant_id,
-                name="Manual Mute Rule",
-                reason="Muted by manual rule",
-                enabled=True,
-                finding_uids=[finding_uid],
-            )
-
-            # Mock finding with mutelist processor muted=True
-            muted_finding = MagicMock()
-            muted_finding.uid = finding_uid
-            muted_finding.status = StatusChoices.FAIL
-            muted_finding.status_extended = "test"
-            muted_finding.severity = Severity.high
-            muted_finding.check_id = "test_check"
-            muted_finding.get_metadata.return_value = {"key": "value"}
-            muted_finding.resource_uid = "resource_both"
-            muted_finding.resource_name = "resource_both"
-            muted_finding.region = "us-east-1"
-            muted_finding.service_name = "ec2"
-            muted_finding.resource_type = "instance"
-            muted_finding.resource_tags = {}
-            muted_finding.muted = True
-            muted_finding.raw = {}
-            muted_finding.resource_metadata = {}
-            muted_finding.resource_details = {}
-            muted_finding.partition = "aws"
-            muted_finding.compliance = {}
-
-            # Mock the ProwlerScan instance
-            mock_prowler_scan_instance = MagicMock()
-            mock_prowler_scan_instance.scan.return_value = [(100, [muted_finding])]
-            mock_prowler_scan_class.return_value = mock_prowler_scan_instance
-
-            # Mock prowler_provider
-            mock_prowler_provider_instance = MagicMock()
-            mock_prowler_provider_instance.get_regions.return_value = ["us-east-1"]
-            mock_initialize_prowler_provider.return_value = (
-                mock_prowler_provider_instance
-            )
-
-            # Call the function under test
-            perform_prowler_scan(tenant_id, scan_id, provider_id, [])
-
-        # Verify mutelist reason takes precedence
-        finding_db = Finding.objects.get(uid=finding_uid)
-        assert finding_db.muted
-        assert finding_db.muted_reason == "Muted by mutelist"
-        assert finding_db.muted_at is not None
-
-        # Verify failed_findings_count is 0
-        resource = Resource.objects.get(uid="resource_both")
-        assert resource.failed_findings_count == 0
-
-    def test_perform_prowler_scan_mute_rules_multiple_findings(
-        self,
-        tenants_fixture,
-        scans_fixture,
-        providers_fixture,
-    ):
-        """Test MuteRule with multiple finding UIDs mutes all findings"""
-        with (
-            patch("api.db_utils.rls_transaction"),
-            patch(
-                "tasks.jobs.scan.initialize_prowler_provider"
-            ) as mock_initialize_prowler_provider,
-            patch("tasks.jobs.scan.ProwlerScan") as mock_prowler_scan_class,
-            patch(
-                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE",
-                new_callable=dict,
-            ),
-            patch("api.compliance.PROWLER_CHECKS", new_callable=dict),
-        ):
-            tenant = tenants_fixture[0]
-            scan = scans_fixture[0]
-            provider = providers_fixture[0]
-
-            provider.provider = Provider.ProviderChoices.AWS
-            provider.save()
-
-            tenant_id = str(tenant.id)
-            scan_id = str(scan.id)
-            provider_id = str(provider.id)
-
-            # Create MuteRule with multiple finding UIDs
-            mute_rule_reason = "Bulk exception for dev environment"
-            finding_uids = [
-                "bulk_finding_1",
-                "bulk_finding_2",
-                "bulk_finding_3",
-                "bulk_finding_4",
-            ]
-            MuteRule.objects.create(
-                tenant_id=tenant_id,
-                name="Bulk Mute Rule",
-                reason=mute_rule_reason,
-                enabled=True,
-                finding_uids=finding_uids,
-            )
-
-            # Mock multiple findings with mixed statuses
-            findings = []
-            for i, uid in enumerate(finding_uids):
-                finding = MagicMock()
-                finding.uid = uid
-                finding.status = (
-                    StatusChoices.FAIL if i % 2 == 0 else StatusChoices.PASS
-                )
-                finding.status_extended = f"test {i}"
-                finding.severity = Severity.medium
-                finding.check_id = f"check_{i}"
-                finding.get_metadata.return_value = {"key": f"value_{i}"}
-                finding.resource_uid = f"resource_bulk_{i}"
-                finding.resource_name = f"resource_{i}"
-                finding.region = "us-west-2"
-                finding.service_name = "lambda"
-                finding.resource_type = "function"
-                finding.resource_tags = {}
-                finding.muted = False
-                finding.raw = {}
-                finding.resource_metadata = {}
-                finding.resource_details = {}
-                finding.partition = "aws"
-                finding.compliance = {}
-                findings.append(finding)
-
-            # Mock the ProwlerScan instance
-            mock_prowler_scan_instance = MagicMock()
-            mock_prowler_scan_instance.scan.return_value = [(100, findings)]
-            mock_prowler_scan_class.return_value = mock_prowler_scan_instance
-
-            # Mock prowler_provider
-            mock_prowler_provider_instance = MagicMock()
-            mock_prowler_provider_instance.get_regions.return_value = ["us-west-2"]
-            mock_initialize_prowler_provider.return_value = (
-                mock_prowler_provider_instance
-            )
-
-            # Call the function under test
-            perform_prowler_scan(tenant_id, scan_id, provider_id, [])
-
-        # Verify all findings are muted with same reason
-        for uid in finding_uids:
-            finding_db = Finding.objects.get(uid=uid)
-            assert finding_db.muted
-            assert finding_db.muted_reason == mute_rule_reason
-            assert finding_db.muted_at is not None
-
-        # Verify all resources have failed_findings_count = 0
-        for i in range(len(finding_uids)):
-            resource = Resource.objects.get(uid=f"resource_bulk_{i}")
-            assert resource.failed_findings_count == 0
-
-    def test_perform_prowler_scan_mute_rules_error_handling(
-        self,
-        tenants_fixture,
-        scans_fixture,
-        providers_fixture,
-    ):
-        """Test scan continues when MuteRule loading fails"""
-        with (
-            patch("api.db_utils.rls_transaction"),
-            patch(
-                "tasks.jobs.scan.initialize_prowler_provider"
-            ) as mock_initialize_prowler_provider,
-            patch("tasks.jobs.scan.ProwlerScan") as mock_prowler_scan_class,
-            patch(
-                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE",
-                new_callable=dict,
-            ),
-            patch("api.compliance.PROWLER_CHECKS", new_callable=dict),
-            patch("api.models.MuteRule.objects.filter") as mock_mute_rule_filter,
-        ):
-            tenant = tenants_fixture[0]
-            scan = scans_fixture[0]
-            provider = providers_fixture[0]
-
-            provider.provider = Provider.ProviderChoices.AWS
-            provider.save()
-
-            tenant_id = str(tenant.id)
-            scan_id = str(scan.id)
-            provider_id = str(provider.id)
-
-            # Mock MuteRule.objects.filter to raise exception
-            mock_mute_rule_filter.side_effect = Exception("Database error")
-
-            # Mock finding
-            finding = MagicMock()
-            finding.uid = "finding_error_handling"
-            finding.status = StatusChoices.FAIL
-            finding.status_extended = "test"
-            finding.severity = Severity.high
-            finding.check_id = "test_check"
-            finding.get_metadata.return_value = {"key": "value"}
-            finding.resource_uid = "resource_error"
-            finding.resource_name = "resource_error"
-            finding.region = "us-east-1"
-            finding.service_name = "ec2"
-            finding.resource_type = "instance"
-            finding.resource_tags = {}
-            finding.muted = False
-            finding.raw = {}
-            finding.resource_metadata = {}
-            finding.resource_details = {}
-            finding.partition = "aws"
-            finding.compliance = {}
-
-            # Mock the ProwlerScan instance
-            mock_prowler_scan_instance = MagicMock()
-            mock_prowler_scan_instance.scan.return_value = [(100, [finding])]
-            mock_prowler_scan_class.return_value = mock_prowler_scan_instance
-
-            # Mock prowler_provider
-            mock_prowler_provider_instance = MagicMock()
-            mock_prowler_provider_instance.get_regions.return_value = ["us-east-1"]
-            mock_initialize_prowler_provider.return_value = (
-                mock_prowler_provider_instance
-            )
-
-            # Call the function under test - should not raise
-            perform_prowler_scan(tenant_id, scan_id, provider_id, [])
-
-        # Verify scan completed successfully
-        scan.refresh_from_db()
-        assert scan.state == StateChoices.COMPLETED
-
-        # Verify finding is not muted (mute_rules_cache was empty dict)
-        finding_db = Finding.objects.get(uid="finding_error_handling")
-        assert not finding_db.muted
-        assert finding_db.muted_reason is None
-
-        # Verify failed_findings_count increments
-        resource = Resource.objects.get(uid="resource_error")
-        assert resource.failed_findings_count == 1
-
-    def test_perform_prowler_scan_muted_at_timestamp(
-        self,
-        tenants_fixture,
-        scans_fixture,
-        providers_fixture,
-    ):
-        """Test muted_at timestamp is set correctly for muted findings"""
-        with (
-            patch("api.db_utils.rls_transaction"),
-            patch(
-                "tasks.jobs.scan.initialize_prowler_provider"
-            ) as mock_initialize_prowler_provider,
-            patch("tasks.jobs.scan.ProwlerScan") as mock_prowler_scan_class,
-            patch(
-                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE",
-                new_callable=dict,
-            ),
-            patch("api.compliance.PROWLER_CHECKS", new_callable=dict),
-        ):
-            tenant = tenants_fixture[0]
-            scan = scans_fixture[0]
-            provider = providers_fixture[0]
-
-            provider.provider = Provider.ProviderChoices.AWS
-            provider.save()
-
-            tenant_id = str(tenant.id)
-            scan_id = str(scan.id)
-            provider_id = str(provider.id)
-
-            # Create active MuteRule
-            finding_uid = "finding_timestamp_test"
-            MuteRule.objects.create(
-                tenant_id=tenant_id,
-                name="Timestamp Test Rule",
-                reason="Testing timestamp",
-                enabled=True,
-                finding_uids=[finding_uid],
-            )
-
-            # Mock finding
-            finding = MagicMock()
-            finding.uid = finding_uid
-            finding.status = StatusChoices.FAIL
-            finding.status_extended = "test"
-            finding.severity = Severity.high
-            finding.check_id = "test_check"
-            finding.get_metadata.return_value = {"key": "value"}
-            finding.resource_uid = "resource_timestamp"
-            finding.resource_name = "resource_timestamp"
-            finding.region = "us-east-1"
-            finding.service_name = "ec2"
-            finding.resource_type = "instance"
-            finding.resource_tags = {}
-            finding.muted = False
-            finding.raw = {}
-            finding.resource_metadata = {}
-            finding.resource_details = {}
-            finding.partition = "aws"
-            finding.compliance = {}
-
-            # Mock the ProwlerScan instance
-            mock_prowler_scan_instance = MagicMock()
-            mock_prowler_scan_instance.scan.return_value = [(100, [finding])]
-            mock_prowler_scan_class.return_value = mock_prowler_scan_instance
-
-            # Mock prowler_provider
-            mock_prowler_provider_instance = MagicMock()
-            mock_prowler_provider_instance.get_regions.return_value = ["us-east-1"]
-            mock_initialize_prowler_provider.return_value = (
-                mock_prowler_provider_instance
-            )
-
-            # Capture time before and after scan
-            before_scan = datetime.now(timezone.utc)
-            perform_prowler_scan(tenant_id, scan_id, provider_id, [])
-            after_scan = datetime.now(timezone.utc)
-
-        # Verify muted_at is within the scan time window
-        finding_db = Finding.objects.get(uid=finding_uid)
-        assert finding_db.muted
-        assert finding_db.muted_at is not None
-        assert before_scan <= finding_db.muted_at <= after_scan
-

 # TODO Add tests for aggregations

@@ -1,24 +1,16 @@
 import uuid
 from unittest.mock import MagicMock, patch

-import openai
 import pytest
-from botocore.exceptions import ClientError
 from tasks.tasks import (
    _perform_scan_complete_tasks,
    check_integrations_task,
-    check_lighthouse_provider_connection_task,
    generate_outputs_task,
-    refresh_lighthouse_provider_models_task,
    s3_integration_task,
    security_hub_integration_task,
 )

-from api.models import (
-    Integration,
-    LighthouseProviderConfiguration,
-    LighthouseProviderModels,
-)
+from api.models import Integration


 # TODO Move this to outputs/reports jobs
@@ -1105,363 +1097,3 @@ class TestCheckIntegrationsTask:

        assert result is False
        mock_upload.assert_called_once_with(self.tenant_id, self.provider_id, scan_id)
-
-
-@pytest.mark.django_db
-class TestCheckLighthouseProviderConnectionTask:
-    def setup_method(self):
-        self.tenant_id = str(uuid.uuid4())
-
-    @pytest.mark.parametrize(
-        "provider_type,credentials,base_url,expected_result",
-        [
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.OPENAI,
-                {"api_key": "sk-test123"},
-                None,
-                {"connected": True, "error": None},
-            ),
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE,
-                {"api_key": "sk-test123"},
-                "https://openrouter.ai/api/v1",
-                {"connected": True, "error": None},
-            ),
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK,
-                {
-                    "access_key_id": "AKIA123",
-                    "secret_access_key": "secret",
-                    "region": "us-east-1",
-                },
-                None,
-                {"connected": True, "error": None},
-            ),
-        ],
-    )
-    def test_check_connection_success_all_providers(
-        self, tenants_fixture, provider_type, credentials, base_url, expected_result
-    ):
-        """Test successful connection check for all provider types."""
-        # Create provider configuration
-        provider_cfg = LighthouseProviderConfiguration(
-            tenant_id=tenants_fixture[0].id,
-            provider_type=provider_type,
-            base_url=base_url,
-            is_active=False,
-        )
-        provider_cfg.credentials_decoded = credentials
-        provider_cfg.save()
-
-        # Mock the appropriate API calls
-        with (
-            patch("tasks.jobs.lighthouse_providers.openai.OpenAI") as mock_openai,
-            patch("tasks.jobs.lighthouse_providers.boto3.client") as mock_boto3,
-        ):
-            mock_client = MagicMock()
-            mock_client.models.list.return_value = MagicMock()
-            mock_client.list_foundation_models.return_value = {}
-            mock_openai.return_value = mock_client
-            mock_boto3.return_value = mock_client
-
-            # Execute
-            result = check_lighthouse_provider_connection_task(
-                provider_config_id=str(provider_cfg.id),
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-            # Assert
-            assert result == expected_result
-            provider_cfg.refresh_from_db()
-            assert provider_cfg.is_active is True
-
-    @pytest.mark.parametrize(
-        "provider_type,credentials,base_url,exception_to_raise",
-        [
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.OPENAI,
-                {"api_key": "sk-invalid"},
-                None,
-                openai.AuthenticationError(
-                    "Invalid API key", response=MagicMock(), body=None
-                ),
-            ),
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE,
-                {"api_key": "sk-invalid"},
-                "https://openrouter.ai/api/v1",
-                openai.APIConnectionError(request=MagicMock()),
-            ),
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK,
-                {
-                    "access_key_id": "AKIA123",
-                    "secret_access_key": "secret",
-                    "region": "us-east-1",
-                },
-                None,
-                ClientError(
-                    {"Error": {"Code": "AccessDenied", "Message": "Access Denied"}},
-                    "list_foundation_models",
-                ),
-            ),
-        ],
-    )
-    def test_check_connection_api_failure(
-        self,
-        tenants_fixture,
-        provider_type,
-        credentials,
-        base_url,
-        exception_to_raise,
-    ):
-        """Test connection check when API calls fail."""
-        # Create provider configuration
-        provider_cfg = LighthouseProviderConfiguration(
-            tenant_id=tenants_fixture[0].id,
-            provider_type=provider_type,
-            base_url=base_url,
-            is_active=True,
-        )
-        provider_cfg.credentials_decoded = credentials
-        provider_cfg.save()
-
-        # Mock the API to raise exception
-        with (
-            patch("tasks.jobs.lighthouse_providers.openai.OpenAI") as mock_openai,
-            patch("tasks.jobs.lighthouse_providers.boto3.client") as mock_boto3,
-        ):
-            mock_client = MagicMock()
-            if (
-                provider_type
-                == LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK
-            ):
-                mock_client.list_foundation_models.side_effect = exception_to_raise
-                mock_boto3.return_value = mock_client
-            else:
-                mock_client.models.list.side_effect = exception_to_raise
-                mock_openai.return_value = mock_client
-
-            # Execute
-            result = check_lighthouse_provider_connection_task(
-                provider_config_id=str(provider_cfg.id),
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-            # Assert
-            assert result["connected"] is False
-            assert result["error"] is not None
-            provider_cfg.refresh_from_db()
-            assert provider_cfg.is_active is False
-
-    def test_check_connection_updates_active_status(self, tenants_fixture):
-        """Test that connection check toggles is_active from True to False on failure."""
-        # Create provider with is_active=True
-        provider_cfg = LighthouseProviderConfiguration(
-            tenant_id=tenants_fixture[0].id,
-            provider_type=LighthouseProviderConfiguration.LLMProviderChoices.OPENAI,
-            base_url=None,
-            is_active=True,
-        )
-        provider_cfg.credentials_decoded = {"api_key": "sk-test123"}
-        provider_cfg.save()
-
-        # Mock API to fail
-        with patch("tasks.jobs.lighthouse_providers.openai.OpenAI") as mock_openai:
-            mock_client = MagicMock()
-            mock_client.models.list.side_effect = openai.AuthenticationError(
-                "Invalid", response=MagicMock(), body=None
-            )
-            mock_openai.return_value = mock_client
-
-            # Execute
-            result = check_lighthouse_provider_connection_task(
-                provider_config_id=str(provider_cfg.id),
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-            # Assert status changed
-            assert result["connected"] is False
-            provider_cfg.refresh_from_db()
-            assert provider_cfg.is_active is False
-
-    def test_check_connection_provider_does_not_exist(self, tenants_fixture):
-        """Test that checking non-existent provider raises DoesNotExist."""
-        non_existent_id = str(uuid.uuid4())
-
-        with pytest.raises(LighthouseProviderConfiguration.DoesNotExist):
-            check_lighthouse_provider_connection_task(
-                provider_config_id=non_existent_id,
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-
-@pytest.mark.django_db
-class TestRefreshLighthouseProviderModelsTask:
-    def setup_method(self):
-        self.tenant_id = str(uuid.uuid4())
-
-    @pytest.mark.parametrize(
-        "provider_type,credentials,base_url,mock_models,expected_count",
-        [
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.OPENAI,
-                {"api_key": "sk-test123"},
-                None,
-                {"gpt-5": "gpt-5", "gpt-4o": "gpt-4o"},
-                2,
-            ),
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.OPENAI_COMPATIBLE,
-                {"api_key": "sk-test123"},
-                "https://openrouter.ai/api/v1",
-                {"model-1": "Model One", "model-2": "Model Two"},
-                2,
-            ),
-            (
-                LighthouseProviderConfiguration.LLMProviderChoices.BEDROCK,
-                {
-                    "access_key_id": "AKIA123",
-                    "secret_access_key": "secret",
-                    "region": "us-east-1",
-                },
-                None,
-                {"openai.gpt-oss-120b-1:0": "gpt-oss-120b"},
-                1,
-            ),
-        ],
-    )
-    def test_refresh_models_create_new(
-        self,
-        tenants_fixture,
-        provider_type,
-        credentials,
-        base_url,
-        mock_models,
-        expected_count,
-    ):
-        """Test creating new models for all provider types."""
-        # Create provider configuration
-        provider_cfg = LighthouseProviderConfiguration(
-            tenant_id=tenants_fixture[0].id,
-            provider_type=provider_type,
-            base_url=base_url,
-            is_active=True,
-        )
-        provider_cfg.credentials_decoded = credentials
-        provider_cfg.save()
-
-        # Mock the fetch functions
-        with (
-            patch(
-                "tasks.jobs.lighthouse_providers._fetch_openai_models",
-                return_value=mock_models,
-            ),
-            patch(
-                "tasks.jobs.lighthouse_providers._fetch_openai_compatible_models",
-                return_value=mock_models,
-            ),
-            patch(
-                "tasks.jobs.lighthouse_providers._fetch_bedrock_models",
-                return_value=mock_models,
-            ),
-        ):
-            # Execute
-            result = refresh_lighthouse_provider_models_task(
-                provider_config_id=str(provider_cfg.id),
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-            # Assert
-            assert result["created"] == expected_count
-            assert result["updated"] == 0
-            assert result["deleted"] == 0
-            assert (
-                LighthouseProviderModels.objects.filter(
-                    provider_configuration=provider_cfg
-                ).count()
-                == expected_count
-            )
-
-    def test_refresh_models_mixed_operations(self, tenants_fixture):
-        """Test mixed create, update, and delete operations."""
-        # Create provider configuration
-        provider_cfg = LighthouseProviderConfiguration(
-            tenant_id=tenants_fixture[0].id,
-            provider_type=LighthouseProviderConfiguration.LLMProviderChoices.OPENAI,
-            base_url=None,
-            is_active=True,
-        )
-        provider_cfg.credentials_decoded = {"api_key": "sk-test123"}
-        provider_cfg.save()
-
-        # Create 2 existing models (A, B)
-        LighthouseProviderModels.objects.create(
-            tenant_id=tenants_fixture[0].id,
-            provider_configuration=provider_cfg,
-            model_id="model-a",
-            model_name="Model A",
-        )
-        LighthouseProviderModels.objects.create(
-            tenant_id=tenants_fixture[0].id,
-            provider_configuration=provider_cfg,
-            model_id="model-b",
-            model_name="Model B",
-        )
-
-        # Mock API to return models B (existing), C (new) - A will be deleted
-        mock_models = {"model-b": "Model B", "model-c": "Model C"}
-        with patch(
-            "tasks.jobs.lighthouse_providers._fetch_openai_models",
-            return_value=mock_models,
-        ):
-            # Execute
-            result = refresh_lighthouse_provider_models_task(
-                provider_config_id=str(provider_cfg.id),
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-            # Assert
-            assert result["created"] == 1  # model-c created
-            assert result["updated"] == 1  # model-b updated
-            assert result["deleted"] == 1  # model-a deleted
-
-            # Verify only B and C exist
-            remaining_models = LighthouseProviderModels.objects.filter(
-                provider_configuration=provider_cfg
-            )
-            assert remaining_models.count() == 2
-            assert set(remaining_models.values_list("model_id", flat=True)) == {
-                "model-b",
-                "model-c",
-            }
-
-    def test_refresh_models_api_exception(self, tenants_fixture):
-        """Test refresh when API raises an exception."""
-        # Create provider configuration
-        provider_cfg = LighthouseProviderConfiguration(
-            tenant_id=tenants_fixture[0].id,
-            provider_type=LighthouseProviderConfiguration.LLMProviderChoices.OPENAI,
-            base_url=None,
-            is_active=True,
-        )
-        provider_cfg.credentials_decoded = {"api_key": "sk-test123"}
-        provider_cfg.save()
-
-        # Mock fetch to raise exception
-        with patch(
-            "tasks.jobs.lighthouse_providers._fetch_openai_models",
-            side_effect=openai.APIError("API Error", request=MagicMock(), body=None),
-        ):
-            # Execute
-            result = refresh_lighthouse_provider_models_task(
-                provider_config_id=str(provider_cfg.id),
-                tenant_id=str(tenants_fixture[0].id),
-            )
-
-            # Assert
-            assert result["created"] == 0
-            assert result["updated"] == 0
-            assert result["deleted"] == 0
-            assert "error" in result
-            assert result["error"] is not None
@@ -35,8 +35,7 @@ dashboard = dash.Dash(

 # Logo
 prowler_logo = html.Img(
-    src="https://cdn.prod.website-files.com/68c4ec3f9fb7b154fbcb6e36/68ffb46d40ed7faa37a592a5_prowler-logo.png",
-    alt="Prowler Logo",
+    src="https://prowler.com/wp-content/uploads/logo-dashboard.png", alt="Prowler Logo"
 )

 menu_icons = {
@@ -1,43 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_3_levels
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    data["REQUIREMENTS_DESCRIPTION"] = (
-        data["REQUIREMENTS_ID"] + " - " + data["REQUIREMENTS_DESCRIPTION"]
-    )
-
-    data["REQUIREMENTS_DESCRIPTION"] = data["REQUIREMENTS_DESCRIPTION"].apply(
-        lambda x: x[:150] + "..." if len(str(x)) > 150 else x
-    )
-
-    data["REQUIREMENTS_ATTRIBUTES_SECTION"] = data[
-        "REQUIREMENTS_ATTRIBUTES_SECTION"
-    ].apply(lambda x: x[:80] + "..." if len(str(x)) > 80 else x)
-
-    data["REQUIREMENTS_ATTRIBUTES_SUBSECTION"] = data[
-        "REQUIREMENTS_ATTRIBUTES_SUBSECTION"
-    ].apply(lambda x: x[:150] + "..." if len(str(x)) > 150 else x)
-
-    aux = data[
-        [
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "REQUIREMENTS_ATTRIBUTES_SUBSECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ]
-
-    return get_section_containers_3_levels(
-        aux,
-        "REQUIREMENTS_ATTRIBUTES_SECTION",
-        "REQUIREMENTS_ATTRIBUTES_SUBSECTION",
-        "REQUIREMENTS_DESCRIPTION",
-    )
@@ -1,46 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_cis
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    # Shorten the long FedRAMP KSI descriptions for better display
-    ksi_short_names = {
-        "A secure cloud service offering will protect user data, control access, and apply zero trust principles": "Identity and Access Management",
-        "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system": "Cloud Native Architecture",
-        "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly": "Change Management",
-        "A secure cloud service provider will continuously educate their employees on cybersecurity measures, testing them regularly": "Cybersecurity Education",
-        "A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement": "Incident Reporting",
-        "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes": "Monitoring, Logging, and Auditing",
-        "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured": "Policy and Inventory",
-        "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss": "Recovery Planning",
-        "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources": "Service Configuration",
-        "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources": "Third-Party Information Resources",
-    }
-
-    # Replace long descriptions with short names - use contains for partial matching
-    if not aux.empty:
-        for long_desc, short_name in ksi_short_names.items():
-            mask = aux["REQUIREMENTS_DESCRIPTION"].str.contains(
-                long_desc, na=False, regex=False
-            )
-            aux.loc[mask, "REQUIREMENTS_DESCRIPTION"] = short_name
-
-    return get_section_containers_cis(
-        aux, "REQUIREMENTS_ID", "REQUIREMENTS_ATTRIBUTES_SECTION"
-    )
@@ -1,46 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_cis
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    # Shorten the long FedRAMP KSI descriptions for better display
-    ksi_short_names = {
-        "A secure cloud service offering will protect user data, control access, and apply zero trust principles": "Identity and Access Management",
-        "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system": "Cloud Native Architecture",
-        "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly": "Change Management",
-        "A secure cloud service provider will continuously educate their employees on cybersecurity measures, testing them regularly": "Cybersecurity Education",
-        "A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement": "Incident Reporting",
-        "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes": "Monitoring, Logging, and Auditing",
-        "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured": "Policy and Inventory",
-        "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss": "Recovery Planning",
-        "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources": "Service Configuration",
-        "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources": "Third-Party Information Resources",
-    }
-
-    # Replace long descriptions with short names - use contains for partial matching
-    if not aux.empty:
-        for long_desc, short_name in ksi_short_names.items():
-            mask = aux["REQUIREMENTS_DESCRIPTION"].str.contains(
-                long_desc, na=False, regex=False
-            )
-            aux.loc[mask, "REQUIREMENTS_DESCRIPTION"] = short_name
-
-    return get_section_containers_cis(
-        aux, "REQUIREMENTS_ID", "REQUIREMENTS_ATTRIBUTES_SECTION"
-    )
@@ -1,46 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_cis
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    # Shorten the long FedRAMP KSI descriptions for better display
-    ksi_short_names = {
-        "A secure cloud service offering will protect user data, control access, and apply zero trust principles": "Identity and Access Management",
-        "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system": "Cloud Native Architecture",
-        "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly": "Change Management",
-        "A secure cloud service provider will continuously educate their employees on cybersecurity measures, testing them regularly": "Cybersecurity Education",
-        "A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement": "Incident Reporting",
-        "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes": "Monitoring, Logging, and Auditing",
-        "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured": "Policy and Inventory",
-        "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss": "Recovery Planning",
-        "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources": "Service Configuration",
-        "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources": "Third-Party Information Resources",
-    }
-
-    # Replace long descriptions with short names - use contains for partial matching
-    if not aux.empty:
-        for long_desc, short_name in ksi_short_names.items():
-            mask = aux["REQUIREMENTS_DESCRIPTION"].str.contains(
-                long_desc, na=False, regex=False
-            )
-            aux.loc[mask, "REQUIREMENTS_DESCRIPTION"] = short_name
-
-    return get_section_containers_cis(
-        aux, "REQUIREMENTS_ID", "REQUIREMENTS_ATTRIBUTES_SECTION"
-    )
@@ -1,25 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_format3
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "REQUIREMENTS_DESCRIPTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    return get_section_containers_format3(
-        aux, "REQUIREMENTS_ATTRIBUTES_SECTION", "REQUIREMENTS_ID"
-    )
@@ -1,24 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_format3
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "REQUIREMENTS_DESCRIPTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    return get_section_containers_format3(
-        aux, "REQUIREMENTS_ATTRIBUTES_SECTION", "REQUIREMENTS_ID"
-    )
@@ -125,11 +125,11 @@ Each check **must** populate the `report.status` and `report.status_extended` fi

 The severity of each check is defined in the metadata file using the `Severity` field. Severity values are always lowercase and must be one of the predefined categories below.

- `critical` – Highest potential impact with broad exposure that could affect core security boundaries or business operations.
- `high` – Substantial potential impact with significant exposure that could affect important security controls or resources.
- `medium` – Moderate potential impact with limited exposure that weakens defense layers but has contained scope.
- `low` – Minimal potential impact with negligible exposure that represents minor gaps in security posture.
- `informational` – Provides valuable information but does not affect the security posture.
+- `critical` – Issue that must be addressed immediately.
+- `high` – Issue that should be addressed as soon as possible.
+- `medium` – Issue that should be addressed within a reasonable timeframe.
+- `low` – Issue that can be addressed in the future.
+- `informational` – Not an issue but provides valuable information.

 If the check involves multiple scenarios that may alter its severity, adjustments can be made dynamically within the check's logic using the severity `report.check_metadata.Severity` attribute:

@@ -4,26 +4,7 @@ title: 'Contributing to Documentation'

 Prowler documentation is built using [Mintlify](https://www.mintlify.com/docs), allowing contributors to easily add or enhance documentation.

-## Documentation Structure
-
-The Prowler documentation is organized into several sections. The main ones are:
-
- **Getting Started**: Provides an overview of the Prowler platform and its different solutions, including Prowler Cloud/App, Prowler CLI, Prowler MCP Server, Prowler Hub, and Prowler Lighthouse AI. This section helps new users understand which Prowler solution best fits their needs and includes product comparisons.
-
- **Guides**: Contains practical tutorials and how-to guides organized by product (Prowler Cloud/App, CLI) and provider (AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub, etc.). This section covers authentication, integrations, compliance, and advanced usage scenarios.
-
- **Developer Guide**: Documentation for contributors looking to extend Prowler functionality. This includes guides on creating providers, services, checks, output formats, integrations, and compliance frameworks. Provider-specific implementation details and testing strategies are also covered here.
-
- **Troubleshooting**: Common issues, error messages, and their solutions. This section helps users resolve problems encountered during installation, configuration, or execution.
-
-
-## AI-Driven Documentation
-
-As mentioned in the [Introduction](/developer-guide/introduction#ai-driven-contributions), we have specialized resources to enhance AI-driven development.
-
-This includes the [AGENTS.md](https://github.com/prowler-cloud/prowler/blob/master/docs/AGENTS.md) file that contains the guidelines and style guide for the AI agents in the Prowler documentation.
-
-## Local Development
+## Installation and Setup

 <Steps>
  <Step title="Install Mintlify CLI">
@@ -52,10 +33,10 @@ This includes the [AGENTS.md](https://github.com/prowler-cloud/prowler/blob/mast
  </Step>

  <Step title="Submit Changes">
-    Once documentation updates are complete, [submit a pull request for review](/developer-guide/introduction#sending-the-pull-request).
+    Once documentation updates are complete, submit a pull request for review.

    The Prowler team will assess and merge contributions.
  </Step>
 </Steps>

-Your efforts help improve Prowler documentation. Thank you for contributing! 🤘
+Your efforts help improve Prowler documentation—thank you for contributing!
@@ -2,70 +2,19 @@
 title: 'Introduction to developing in Prowler'
 ---

-Thanks for your interest in contributing to Prowler!
+Extending Prowler

-Prowler can be extended in various ways. This guide provides the different ways to contribute and how to get started.
+Prowler can be extended in various ways, with common use cases including:

-## Contributing to Prowler
+- New security checks
+- New compliance frameworks
+- New output formats
+- New integrations
+- New proposed features

-### Review Current Issues
-Check out our [GitHub Issues](https://github.com/prowler-cloud/prowler/issues) page for ideas to contribute.
-<Columns cols={2}>
-  <Card title="Good First Issue" icon="github" href="https://github.com/prowler-cloud/prowler/issues?q=sort%3Aupdated-desc%20is%3Aissue%20is%3Aopen%20label%3A%22good%20first%20issue%22">
-    We tag issues as `good first issue` for new contributors. These are typically well-defined and manageable in scope.
-  </Card>
-  <Card title="Help Wanted" icon="github" href="https://github.com/prowler-cloud/prowler/issues?q=sort%3Aupdated-desc%20is%3Aissue%20is%3Aopen%20label%3A%22help%20wanted%22">
-    We tag issues as `help wanted` for other issues that require more time to complete.
-  </Card>
-</Columns>
+All the relevant information for these cases is included in this guide.

-### Expand Prowler's Capabilities
-Prowler is constantly evolving. Contributions to checks, services, or integrations help improve the tool for everyone. Here is how to get involved:
-
-<Columns cols={2}>
-  <Card title="Adding New Checks" icon="shield" href="/developer-guide/checks">
-    Want to improve Prowler's detection capabilities for your favorite cloud provider? You can contribute by writing new checks.
-  </Card>
-  <Card title="Adding New Services" icon="server" href="/developer-guide/services">
-    One key service for your favorite cloud provider is missing? Add it to Prowler! Do not forget to include relevant checks to validate functionality.
-  </Card>
-  <Card title="Adding New Providers" icon="cloud" href="/developer-guide/provider">
-    If you would like to extend Prowler to work with a new cloud provider, this typically involves setting up new services and checks to ensure compatibility.
-  </Card>
-  <Card title="Adding New Output Formats" icon="file" href="/developer-guide/outputs">
-    Want to tailor how results are displayed or exported? You can add custom output formats.
-  </Card>
-  <Card title="Adding New Integrations" icon="link" href="/developer-guide/integrations">
-    Prowler can work with other tools and platforms through integrations.
-  </Card>
-  <Card title="Proposing or Implementing Features" icon="lightbulb" href="https://github.com/prowler-cloud/prowler/issues/new?template=feature-request.yml">
-    Propose brand-new features or enhancements to existing ones, or help implement community-requested improvements.
-  </Card>
-</Columns>
-
-### Improve Documentation
-Help make Prowler more accessible by enhancing our documentation, fixing typos, or adding examples/tutorials.
-
-<Columns cols={2}>
-  <Card title="Documentation Guide" icon="book" href="/developer-guide/documentation">
-    Enhance our documentation, fix typos, or add examples/tutorials.
-  </Card>
-</Columns>
-
-### Bug Fixes
-If you find any issues or bugs, you can report them in the [GitHub Issues](https://github.com/prowler-cloud/prowler/issues) page and if you want you can also fix them.
-
-<Columns cols={2}>
-  <Card title="Report a Bug" icon="bug" href="https://github.com/prowler-cloud/prowler/issues/new?template=bug_report.yml">
-    Report or fix issues or bugs.
-  </Card>
-</Columns>
-
-Remember, our community is here to help! If you need guidance, do not hesitate to ask questions in the issues or join our [<Icon icon="slack" /> Slack workspace](https://goto.prowler.com/slack).
-
-
-
-## Setting up your development environment
+## Getting the Code and Installing All Dependencies

 ### Prerequisites

@@ -77,11 +26,11 @@ Before proceeding, ensure the following:

 ### Forking the Prowler Repository

-Fork the Prowler GitHub repository to contribute to Prowler. This allows proposing changes, submitting new features, and fixing bugs. For guidance on forking, refer to the [official GitHub documentation](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/working-with-forks/fork-a-repo?tool=webui#forking-a-repository).
+To contribute to Prowler, fork the Prowler GitHub repository. This allows you to propose changes, submit new features, and fix bugs. For guidance on forking, refer to the [official GitHub documentation](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/working-with-forks/fork-a-repo?tool=webui#forking-a-repository).

 ### Cloning Your Forked Repository

-Once your fork is created, clone it using the following commands (replace `<your-github-user>` with your GitHub username):
+Once your fork is created, clone it using the following commands:

 ```
 git clone https://github.com/<your-github-user>/prowler
@@ -107,7 +56,39 @@ If your poetry version is below 2.0.0 you must keep using `poetry shell` to acti
 In case you have any doubts, consult the [Poetry environment activation guide](https://python-poetry.org/docs/managing-environments/#activating-the-environment).

 </Warning>
+## Contributing to Prowler

+### Ways to Contribute
+
+Here are some ideas for collaborating with Prowler:
+
+1. **Review Current Issues**: Check out our [GitHub Issues](https://github.com/prowler-cloud/prowler/issues) page. We often tag issues as `good first issue` - these are perfect for new contributors as they are typically well-defined and manageable in scope.
+
+2. **Expand Prowler's Capabilities**: Prowler is constantly evolving, and you can be a part of its growth. Whether you are adding checks, supporting new services, or introducing integrations, your contributions help improve the tool for everyone. Here is how you can get involved:
+
+    - **Adding New Checks**
+    Want to improve Prowler's detection capabilities for your favorite cloud provider? You can contribute by writing new checks. To get started, follow the [create a new check guide](/developer-guide/checks).
+
+    - **Adding New Services**
+    One key service for your favorite cloud provider is missing? Add it to Prowler! To add a new service, check out the [create a new service guide](/developer-guide/services). Do not forget to include relevant checks to validate functionality.
+
+    - **Adding New Providers**
+    If you would like to extend Prowler to work with a new cloud provider, follow the [create a new provider guide](/developer-guide/provider). This typically involves setting up new services and checks to ensure compatibility.
+
+    - **Adding New Output Formats**
+    Want to tailor how results are displayed or exported? You can add custom output formats by following the [create a new output format guide](/developer-guide/outputs).
+
+    - **Adding New Integrations**
+    Prowler can work with other tools and platforms through integrations. If you would like to add one, see the [create a new integration guide](/developer-guide/integrations).
+
+    - **Proposing or Implementing Features**
+    Got an idea to make Prowler better? Whether it is a brand-new feature or an enhancement to an existing one, you are welcome to propose it or help implement community-requested improvements.
+
+3. **Improve Documentation**: Help make Prowler more accessible by enhancing our documentation, fixing typos, or adding examples/tutorials. See the tutorial of how we write our documentation [here](/developer-guide/documentation).
+
+4. **Bug Fixes**: If you find any issues or bugs, you can report them in the [GitHub Issues](https://github.com/prowler-cloud/prowler/issues) page and if you want you can also fix them.
+
+Remember, our community is here to help! If you need guidance, do not hesitate to ask questions in the issues or join our [Slack workspace](https://goto.prowler.com/slack).

 ### Pre-Commit Hooks

@@ -140,16 +121,6 @@ These should have been already installed if `poetry install --with dev` was alre

 Additionally, ensure the latest version of [`TruffleHog`](https://github.com/trufflesecurity/trufflehog) is installed to scan for sensitive data in the code. Follow the official [installation guide](https://github.com/trufflesecurity/trufflehog?tab=readme-ov-file#floppy_disk-installation) for setup.

-### AI-Driven Contributions
-
-If you are using AI assistants to help with your contributions, Prowler provides specialized resources to enhance AI-driven development:
-
- **Prowler MCP Server**: The [Prowler MCP Server](/getting-started/products/prowler-mcp) provides AI assistants with access to the entire Prowler ecosystem, including security checks, compliance frameworks, documentation, and more. This enables AI tools to better understand Prowler's architecture and help you create contributions that align with project standards.
-
- **AGENTS.md Files**: Each component of the Prowler monorepo includes an `AGENTS.md` file that contains specific guidelines for AI agents working on that component. These files provide context about project structure, coding standards, and best practices. When working on a specific component, refer to the relevant `AGENTS.md` file (e.g., `prowler/AGENTS.md`, `ui/AGENTS.md`, `api/AGENTS.md`) to ensure your AI assistant follows the appropriate guidelines.
-
-These resources help ensure that AI-assisted contributions maintain consistency with Prowler's codebase and development practices.
-
 ### Dependency Management

 All dependencies are listed in the `pyproject.toml` file.
@@ -162,7 +133,7 @@ If you encounter issues when committing to the Prowler repository, use the `--no
 </Note>
 ### Repository Folder Structure

-The Prowler codebase layout helps quickly locate where to add new features, checks, or integrations. The following is a high-level overview from the root of the repository:
+Understanding the layout of the Prowler codebase will help you quickly find where to add new features, checks, or integrations. The following is a high-level overview from the root of the repository:

 ```
 prowler/
@@ -177,7 +148,7 @@ prowler/
 ├── permissions/       # Permission-related files and policies
 ├── contrib/           # Community-contributed scripts or modules
 ├── kubernetes/        # Kubernetes deployment files
-├── .github/           # GitHub-related files (workflows, issue templates, etc.)
+├── .github/           # GitHub related files (workflows, issue templates, etc.)
 ├── pyproject.toml     # Python project configuration (Poetry)
 ├── poetry.lock        # Poetry lock file
 ├── README.md          # Project overview and getting started
@@ -187,23 +158,19 @@ prowler/
 └── ...                # Other supporting files
 ```

-## Sending the Pull Request
+## Pull Request Checklist

-When creating or reviewing a pull request in <Icon icon="github" /> [Prowler](https://github.com/prowler-cloud/prowler), follow [this template](https://github.com/prowler-cloud/prowler/blob/master/.github/pull_request_template.md) and fill it with the relevant information:
-
- **Context** and **Description** of the change: This will help the reviewers to understand the change and the purpose of the pull request.
- **Steps to review**: A detailed description of how to review the change.
- **Checklist**: A mandatory checklist of the things that should be reviewed before merging the pull request.
+When creating or reviewing a pull request in https://github.com/prowler-cloud/prowler, follow [this checklist](https://github.com/prowler-cloud/prowler/blob/master/.github/pull_request_template.md#checklist).

 ## Contribution Appreciation

-If you enjoy swag, we'd love to thank you for your contribution with laptop stickers or other Prowler merchandise!
+If you enjoy swag, we’d love to thank you for your contribution with laptop stickers or other Prowler merchandise!

 To request swag: Share your pull request details in our [Slack workspace](https://goto.prowler.com/slack).

 You can also reach out to Toni de la Fuente on [Twitter](https://twitter.com/ToniBlyx)—his DMs are open!

-## Testing a Pull Request from a Specific Branch
+# Testing a Pull Request from a Specific Branch

 To test Prowler from a specific branch (for example, to try out changes from a pull request before it is merged), you can use `pipx` to install directly from GitHub:

@@ -212,5 +179,3 @@ pipx install "git+https://github.com/prowler-cloud/prowler.git@branch-name"
 ```

 Replace `branch-name` with the name of the branch you want to test. This will install Prowler in an isolated environment, allowing you to try out the changes safely.
-
-For more details on testing go to the [Testing section](/developer-guide/unit-testing) of this documentation.
@@ -4,7 +4,7 @@ title: 'Kubernetes Provider'

 This page details the [Kubernetes](https://kubernetes.io/) provider implementation in Prowler.

-By default, Prowler will audit all namespaces in the Kubernetes cluster accessible by the configured context. To configure it, see the [In-Cluster Execution](/user-guide/providers/kubernetes/getting-started-k8s#in-cluster-execution) or [Non In-Cluster Execution](/user-guide/providers/kubernetes/getting-started-k8s#non-in-cluster-execution) guides.
+By default, Prowler will audit all namespaces in the Kubernetes cluster accessible by the configured context. To configure it, see the [In-Cluster Execution](/user-guide/providers/kubernetes/in-cluster) or [Non In-Cluster Execution](/user-guide/providers/kubernetes/outside-cluster) guides.

 ## Kubernetes Provider Classes Architecture

@@ -98,7 +98,7 @@
                ]
              },
              "user-guide/tutorials/prowler-app-rbac",
-              "user-guide/tutorials/prowler-app-api-keys",
+              "user-guide/providers/prowler-app-api-keys",
              "user-guide/tutorials/prowler-app-mute-findings",
              {
                "group": "Integrations",
@@ -110,7 +110,6 @@
                ]
              },
              "user-guide/tutorials/prowler-app-lighthouse",
-              "user-guide/tutorials/prowler-cloud-public-ips",
              {
                "group": "Tutorials",
                "pages": [
@@ -195,7 +194,8 @@
              {
                "group": "Kubernetes",
                "pages": [
-                  "user-guide/providers/kubernetes/getting-started-k8s",
+                  "user-guide/providers/kubernetes/in-cluster",
+                  "user-guide/providers/kubernetes/outside-cluster",
                  "user-guide/providers/kubernetes/misc"
                ]
              },
@@ -329,10 +329,6 @@
      {
        "tab": "Public Roadmap",
        "href": "https://roadmap.prowler.com/"
-      },
-      {
-        "tab": "API Reference",
-        "openapi": "api-reference/openapi.yml"
      }
    ],
    "global": {
@@ -4,29 +4,33 @@ title: "Configuration"

 Configure your MCP client to connect to Prowler MCP Server.

-## Step 1: Get Your API Key
+## Step 1: Get Your API Key (Optional)

 <Note>
 **Authentication is optional**: Prowler Hub and Prowler Documentation features work without authentication. An API key is only required for Prowler Cloud and Prowler App (Self-Managed) features.
 </Note>

-To use Prowler Cloud or Prowler App (Self-Managed) features. To get the API key, please refer to the [API Keys](/user-guide/tutorials/prowler-app-api-keys) guide.
+To use Prowler Cloud or Prowler App (Self-Managed) features. To get the API key, please refer to the [API Keys](/user-guide/providers/prowler-app-api-keys) guide.

 <Warning>
 Keep the API key secure. Never share it publicly or commit it to version control.
 </Warning>

-## Step 2: Configure Your MCP Host/Client
+## Step 2: Configure Your MCP Client

 Choose the configuration based on your deployment:

+- **STDIO Mode**: Local installation only (runs as subprocess).
 - **HTTP Mode**: Prowler Cloud MCP Server or self-hosted Prowler MCP Server.
- **STDIO Mode**: Local installation only (runs as subprocess of your MCP client).

-### HTTP Mode
+### HTTP Mode (Prowler Cloud MCP Server or self-hosted Prowler MCP Server)

 <Tabs>
-  <Tab title="Generic Native HTTP Support">
+  <Tab title="Native HTTP Support (Cursor, VSCode)">
+    **Clients that support HTTP with custom headers natively**
+
+    For example: Cursor, VSCode, LobeChat, etc.
+
    **Configuration:**
    ```json
    {
@@ -34,15 +38,20 @@ Choose the configuration based on your deployment:
        "prowler": {
          "url": "https://mcp.prowler.com/mcp", // or your self-hosted Prowler MCP Server URL
          "headers": {
-            "Authorization": "Bearer <your-api-key-here>"
+            "Authorization": "Bearer pk_your_api_key_here"
          }
        }
      }
    }
    ```
+
  </Tab>

-  <Tab title="Generic without Native HTTP Support">
+  <Tab title="Using mcp-remote (Claude Desktop)">
+    **For clients without native HTTP support (like Claude Desktop)**
+
+    For example: Claude Desktop.
+
    **Configuration:**
    ```json
    {
@@ -56,79 +65,26 @@ Choose the configuration based on your deployment:
            "Authorization: Bearer ${PROWLER_APP_API_KEY}"
          ],
          "env": {
-            "PROWLER_APP_API_KEY": "<your-api-key-here>"
+            "PROWLER_APP_API_KEY": "pk_your_api_key_here"
          }
        }
      }
    }
    ```
+
    <Info>
    The `mcp-remote` tool acts as a bridge for clients that don't support HTTP natively. Learn more at [mcp-remote on npm](https://www.npmjs.com/package/mcp-remote).
    </Info>
+
  </Tab>
-
-  <Tab title="Claude Desktop">
-    1. Open Claude Desktop settings
-    2. Go to "Developer" tab
-    3. Click in "Edit Config" button
-    4. Edit the `claude_desktop_config.json` file with your favorite editor
-    5. Add the following configuration:
-    ```json
-    {
-      "mcpServers": {
-        "prowler": {
-          "command": "npx",
-          "args": [
-            "mcp-remote",
-            "https://mcp.prowler.com/mcp",
-            "--header",
-            "Authorization: Bearer ${PROWLER_APP_API_KEY}"
-          ],
-          "env": {
-            "PROWLER_APP_API_KEY": "<your-api-key-here>"
-          }
-        }
-      }
-    }
-    ```
-  </Tab>
-
-  <Tab title="Claude Code">
-    Run the following command:
-    ```bash
-    export PROWLER_APP_API_KEY="<your-api-key-here>"
-    claude mcp add --transport http prowler https://mcp.prowler.com/mcp --header "Authorization: Bearer $PROWLER_APP_API_KEY" --scope user
-    ```
-  </Tab>
-
-  <Tab title="Cursor">
-    1. Open Cursor settings
-    2. Go to "Tools & MCP"
-    3. Click in "New MCP Server" button
-    4. Add to the JSON Configuration the following:
-    ```json
-    {
-      "mcpServers": {
-        "prowler": {
-          "url": "https://mcp.prowler.com/mcp",
-          "headers": {
-            "Authorization": "Bearer <your-api-key-here>"
-          }
-        }
-      }
-    }
-    ```
-  </Tab>
-
-
 </Tabs>

-### STDIO Mode
+### STDIO Mode (Local Installation Only)

 STDIO mode is only available when running the MCP server locally.

 <Tabs>
-  <Tab title="Generic uvx installation">
+  <Tab title="Using uvx">
    **Run from source or local installation**

    ```json
@@ -138,7 +94,7 @@ STDIO mode is only available when running the MCP server locally.
          "command": "uvx",
          "args": ["/absolute/path/to/prowler/mcp_server/"],
          "env": {
-            "PROWLER_APP_API_KEY": "<your-api-key-here>",
+            "PROWLER_APP_API_KEY": "pk_your_api_key_here",
            "PROWLER_API_BASE_URL": "https://api.prowler.com"
          }
        }
@@ -152,7 +108,7 @@ STDIO mode is only available when running the MCP server locally.

  </Tab>

-  <Tab title="Generic Docker installation">
+  <Tab title="Using Docker">
    **Run with Docker image**

    ```json
@@ -165,7 +121,7 @@ STDIO mode is only available when running the MCP server locally.
            "--rm",
            "-i",
            "--env",
-            "PROWLER_APP_API_KEY=<your-api-key-here>",
+            "PROWLER_APP_API_KEY=pk_your_api_key_here",
            "--env",
            "PROWLER_API_BASE_URL=https://api.prowler.com",
            "prowlercloud/prowler-mcp"
@@ -198,7 +154,7 @@ Prowler MCP Server supports two authentication methods to connect to Prowler Clo
 Use your Prowler API key directly in the Bearer token:

 ```
-Authorization: Bearer <your-api-key-here>
+Authorization: Bearer pk_your_api_key_here
 ```

 This is the recommended method for most users.
@@ -1,5 +1,5 @@
 ---
-title: "Installation"
+title: 'Installation'
 ---

 ### Installation
@@ -9,40 +9,41 @@ Prowler App supports multiple installation methods based on your environment.
 Refer to the [Prowler App Tutorial](/user-guide/tutorials/prowler-app) for detailed usage instructions.

 <Warning>
-  Prowler configuration is based in `.env` files. Every version of Prowler can have differences on that file, so, please, use the file that corresponds with that version or repository branch or tag.
-</Warning>
+Prowler configuration is based in `.env` files. Every version of Prowler can have differences on that file, so, please, use the file that corresponds with that version or repository branch or tag.

+</Warning>
 <Tabs>
  <Tab title="Docker Compose">
    _Requirements_:

-    - `Docker Compose` installed: https://docs.docker.com/compose/install/.
+    * `Docker Compose` installed: https://docs.docker.com/compose/install/.

    _Commands_:

-    ```bash
-    VERSION=$(curl -s https://api.github.com/repos/prowler-cloud/prowler/releases/latest | jq -r .tag_name)
-    curl -sLO "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/tags/${VERSION}/docker-compose.yml"
-    curl -sLO "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/tags/${VERSION}/.env"
+    ``` bash
+    curl -LO https://raw.githubusercontent.com/prowler-cloud/prowler/refs/heads/master/docker-compose.yml
+    curl -LO https://raw.githubusercontent.com/prowler-cloud/prowler/refs/heads/master/.env
    docker compose up -d
    ```

    > Containers are built for `linux/amd64`. If your workstation's architecture is different, please set `DOCKER_DEFAULT_PLATFORM=linux/amd64` in your environment or use the `--platform linux/amd64` flag in the docker command.
+
  </Tab>
  <Tab title="GitHub">
    _Requirements_:

-    - `git` installed.
-    - `poetry` installed: [poetry installation](https://python-poetry.org/docs/#installation).
-    - `npm` installed: [npm installation](https://docs.npmjs.com/downloading-and-installing-node-js-and-npm).
-    - `Docker Compose` installed: https://docs.docker.com/compose/install/.
+    * `git` installed.
+    * `poetry` installed: [poetry installation](https://python-poetry.org/docs/#installation).
+    * `npm` installed: [npm installation](https://docs.npmjs.com/downloading-and-installing-node-js-and-npm).
+    * `Docker Compose` installed: https://docs.docker.com/compose/install/.

    <Warning>
-      Make sure to have `api/.env` and `ui/.env.local` files with the required environment variables. You can find the required environment variables in the [`api/.env.template`](https://github.com/prowler-cloud/prowler/blob/master/api/.env.example) and [`ui/.env.template`](https://github.com/prowler-cloud/prowler/blob/master/ui/.env.template) files.
+    Make sure to have `api/.env` and `ui/.env.local` files with the required environment variables. You can find the required environment variables in the [`api/.env.template`](https://github.com/prowler-cloud/prowler/blob/master/api/.env.example) and [`ui/.env.template`](https://github.com/prowler-cloud/prowler/blob/master/ui/.env.template) files.
    </Warning>
+
    _Commands to run the API_:

-    ```bash
+    ``` bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/api \
    poetry install \
@@ -56,15 +57,17 @@ Refer to the [Prowler App Tutorial](/user-guide/tutorials/prowler-app) for detai
    ```

    <Warning>
-      Starting from Poetry v2.0.0, `poetry shell` has been deprecated in favor of `poetry env activate`.
+    Starting from Poetry v2.0.0, `poetry shell` has been deprecated in favor of `poetry env activate`.

-      If your poetry version is below 2.0.0 you must keep using `poetry shell` to activate your environment. In case you have any doubts, consult the Poetry environment activation guide: https://python-poetry.org/docs/managing-environments/#activating-the-environment
+    If your poetry version is below 2.0.0 you must keep using `poetry shell` to activate your environment.
+    In case you have any doubts, consult the Poetry environment activation guide: https://python-poetry.org/docs/managing-environments/#activating-the-environment
    </Warning>
+
    > Now, you can access the API documentation at http://localhost:8080/api/v1/docs.

    _Commands to run the API Worker_:

-    ```bash
+    ``` bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/api \
    poetry install \
@@ -77,7 +80,7 @@ Refer to the [Prowler App Tutorial](/user-guide/tutorials/prowler-app) for detai

    _Commands to run the API Scheduler_:

-    ```bash
+    ``` bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/api \
    poetry install \
@@ -90,7 +93,7 @@ Refer to the [Prowler App Tutorial](/user-guide/tutorials/prowler-app) for detai

    _Commands to run the UI_:

-    ```bash
+    ``` bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/ui \
    npm install \
@@ -101,11 +104,10 @@ Refer to the [Prowler App Tutorial](/user-guide/tutorials/prowler-app) for detai
    > Enjoy Prowler App at http://localhost:3000 by signing up with your email and password.

    <Warning>
-      Google and GitHub authentication is only available in [Prowler Cloud](https://prowler.com).
+    Google and GitHub authentication is only available in [Prowler Cloud](https://prowler.com).
    </Warning>
  </Tab>
 </Tabs>
-
 ### Update Prowler App

 Upgrade Prowler App installation using one of two options:
@@ -127,12 +129,13 @@ docker compose pull --policy always

 The `--policy always` flag ensures that Docker pulls the latest images even if they already exist locally.

+
 <Note>
-  **What Gets Preserved During Upgrade**
+**What Gets Preserved During Upgrade**
+
+Everything is preserved, nothing will be deleted after the update.

-  Everything is preserved, nothing will be deleted after the update.
 </Note>
-
 ### Troubleshooting

 If containers don't start, check logs for errors:
@@ -152,6 +155,7 @@ docker compose pull
 docker compose up -d
 ```

+
 ### Container versions

 The available versions of Prowler CLI are the following:
@@ -167,5 +171,6 @@ The available versions of Prowler CLI are the following:
 The container images are available here:

 - Prowler App:
-  - [DockerHub - Prowler UI](https://hub.docker.com/r/prowlercloud/prowler-ui/tags)
-  - [DockerHub - Prowler API](https://hub.docker.com/r/prowlercloud/prowler-api/tags)
+
+    - [DockerHub - Prowler UI](https://hub.docker.com/r/prowlercloud/prowler-ui/tags)
+    - [DockerHub - Prowler API](https://hub.docker.com/r/prowlercloud/prowler-api/tags)
@@ -5,7 +5,7 @@ title: "Overview"
 **Prowler MCP Server** brings the entire Prowler ecosystem to AI assistants through the Model Context Protocol (MCP). It enables seamless integration with AI tools like Claude Desktop, Cursor, and other MCP clients, allowing interaction with Prowler's security capabilities through natural language.

 <Warning>
-**Preview Feature**: This MCP server is currently under active development. Features and functionality may change. We welcome your feedback—please report any issues on [GitHub](https://github.com/prowler-cloud/prowler/issues) or join our [Slack community](https://goto.prowler.com/slack) to discuss and share your thoughts.
+**Preview Feature**: This MCP server is currently in preview and under active development. Features and functionality may change. We welcome your feedback—please report any issues on [GitHub](https://github.com/prowler-cloud/prowler/issues) or join our [Slack community](https://goto.prowler.com/slack) to discuss and share your thoughts.
 </Warning>

 ## What is the Model Context Protocol?
@@ -42,15 +42,6 @@ Search and retrieve official Prowler documentation:
 - **Contextual Results**: Get relevant documentation pages with highlighted snippets.
 - **Document Retrieval**: Access complete markdown content of any documentation file.

-## MCP Server Architecture
-
-The following diagram illustrates the Prowler MCP Server architecture and its integration points:
-
-<img className="block dark:hidden" src="/images/prowler_mcp_schema_light.png" alt="Prowler MCP Server Schema" />
-<img className="hidden dark:block" src="/images/prowler_mcp_schema_dark.png" alt="Prowler MCP Server Schema" />
-
-The architecture shows how AI assistants connect through the MCP protocol to access Prowler's three main components: Prowler Cloud/App for security operations, Prowler Hub for security knowledge, and Prowler Documentation for guidance and reference.
-
 ## Use Cases

 The Prowler MCP Server enables powerful workflows through AI assistants:
@@ -70,59 +61,6 @@ The Prowler MCP Server enables powerful workflows through AI assistants:
 - "What authentication methods does Prowler support for Azure?"
 - "How can I contribute with a new security check to Prowler?"

-### Example: Creating a custom dashboard with Prowler extracted data
-
-In the next example you can see how to create a dashboard using Prowler MCP Server and Claude Desktop.
-
-**Used Prompt:**
-```
-Generate me a security dashboard for the Prowler open source project using live data from Prowler MCP tools.
-
-REQUIREMENTS:
-1. Fetch real-time data from Prowler Findings using MCP tools
-2. Create a single self-contained HTML file and display it
-3. Dashboard must be production-ready with modern design
-
-DATA TO FETCH:
-Use these MCP tools in this order:
-1. Prowler app list providers - To get all available configured provider in the account
-2. Prowler app get latest findings - To get findings information, if there are so many you can use the filter_fields to get less information, or pagination to get in different batches
-3. For most critical findings you can get more context and remediation with Prowler Hub to get remediations for example
-
-DESIGN REQUIREMENTS:
- Dark theme (gradient background: #0a0e27 to #131830)
- Card-based layout with glassmorphism effects
- Color scheme:
- * Primary green
- * Secondary purple
- Modern, professional look
- Animated "LIVE DATA" indicator (pulsing green badge)
- Hover effects on all cards (lift, glow, border color change)
- Responsive grid layout
- Mobile-responsive breakpoints at 768px
- Single HTML file with all CSS and JavaScript embedded
- No external dependencies
-
-SPECIFIC DETAILS TO INCLUDE:
- Show actual counts from the data (don't hardcode numbers)
- Add timestamp showing when dashboard was generated
- Link to GitHub repository: https://github.com/prowler-cloud/prowler
-
-OUTPUT:
-Generate the complete HTML file and display it
-```
-
-**Video:**
-<iframe
-  className="w-full aspect-video rounded-xl"
-  src="https://www.youtube.com/embed/li29KNmYd4g?si=P3m6eB2z0Cqqse_H"
-  title="Prowler MCP Server - Creating a dashboard"
-  frameBorder="0"
-  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
-  allowFullScreen
-></iframe>
-
-
 ## Deployment Options

 Prowler MCP Server can be used in three ways:
@@ -28,12 +28,12 @@ The supported providers right now are:
 | [AWS](/user-guide/providers/aws/getting-started-aws)                             | Official   | UI, API, CLI |
 | [Azure](/user-guide/providers/azure/getting-started-azure)                       | Official   | UI, API, CLI |
 | [Google Cloud](/user-guide/providers/gcp/getting-started-gcp)                    | Official   | UI, API, CLI |
-| [Kubernetes](/user-guide/providers/kubernetes/getting-started-k8s)               | Official   | UI, API, CLI |
+| [Kubernetes](/user-guide/providers/kubernetes/in-cluster)                        | Official   | UI, API, CLI |
 | [M365](/user-guide/providers/microsoft365/getting-started-m365)                  | Official   | UI, API, CLI |
 | [Github](/user-guide/providers/github/getting-started-github)                    | Official   | UI, API, CLI |
-| [Oracle Cloud](/user-guide/providers/oci/getting-started-oci)                    | Official   | UI, API, CLI |
-| [Infra as Code](/user-guide/providers/iac/getting-started-iac)                   | Official   | UI, API, CLI |
-| [MongoDB Atlas](/user-guide/providers/mongodbatlas/getting-started-mongodbatlas) | Official   | CLI, API     |
+| [Oracle Cloud](/user-guide/providers/oci/getting-started-oci)                    | Official   | CLI          |
+| [Infra as Code](/user-guide/providers/iac/getting-started-iac)                   | Official   | CLI          |
+| [MongoDB Atlas](/user-guide/providers/mongodbatlas/getting-started-mongodbatlas) | Official   | CLI          |
 | [LLM](/user-guide/providers/llm/getting-started-llm)                             | Official   | CLI          |
 | **NHN**                                                                          | Unofficial | CLI          |

@@ -48,4 +48,4 @@ For more information about the checks and compliance of each provider visit [Pro
  <Card title="Development Guide" icon="pen-to-square" href="/developer-guide/introduction">
    Interested in contributing to Prowler?
  </Card>
-</Columns>
+</Columns>
@@ -1,12 +0,0 @@
-export const VersionBadge = ({ version }) => {
-    return (
-        <code className="version-badge-container">
-            <p className="version-badge">
-                <span className="version-badge-label">Added in:</span>&nbsp;
-                <code className="version-badge-version">{version}</code>
-            </p>
-        </code>
-
-
-    );
-};
@@ -1,51 +0,0 @@
-/* Version Badge Styling */
-.version-badge-container {
-    display: inline-block;
-        margin: 0 0 1rem 0;
-    padding: 0;
-}
-
-.version-badge {
-    display: inline-flex;
-    align-items: center;
-    margin: 0;
-    padding: 0.375rem 0.75rem;
-    background: linear-gradient(135deg, #1a1a1a 0%, #000000 100%);
-    color: #ffffff;
-    border-radius: 1.25rem;
-    font-weight: 400;
-    font-size: 0.875rem;
-    line-height: 1.25rem;
-    border: 1px solid rgba(0, 0, 0, 0.15);
-    box-shadow: none;
-}
-
-.version-badge-label {
-    font-weight: 400;
-    opacity: 1;
-}
-
-.version-badge-version {
-    background: rgba(255, 255, 255, 0.12);
-    padding: 0.125rem 0.5rem;
-    border-radius: 0.875rem;
-    font-family: ui-monospace, SFMono-Regular, 'SF Mono', Menlo, Monaco, 'Cascadia Code', 'Roboto Mono', Consolas, 'Courier New', monospace;
-    font-weight: 600;
-    font-size: 0.875rem;
-    color: #ffffff;
-    border: none;
-}
-
-
-.dark .version-badge {
-    background: #55B685;
-        color: #000000;
-        border: 2px solid rgba(85, 182, 133, 0.3);
-        box-shadow: none;
-    }
-
-    .dark .version-badge-version {
-        background: rgba(0, 0, 0, 0.1);
-        color: #000000;
-        border: none;
-}
@@ -24,7 +24,7 @@ Standard results will be shown and additionally the framework information as the
 **If Prowler can't find a resource related with a check from a compliance requirement, this requirement won't appear on the output**
 </Note>

-## List Available Compliance Frameworks
+## List Available Compliance Frameworks

 To see which compliance frameworks are covered by Prowler, use the `--list-compliance` option:

@@ -34,7 +34,7 @@ prowler <provider> --list-compliance

 Or you can visit [Prowler Hub](https://hub.prowler.com/compliance).

-## List Requirements of Compliance Frameworks
+## List Requirements of Compliance Frameworks
 To list requirements for a compliance framework, use the `--list-compliance-requirements` option:

 ```sh
@@ -94,7 +94,7 @@ The following list includes all the Azure checks with configurable variables tha

 ### Configurable Checks

-## Kubernetes
+## Kubernetes

 ### Configurable Checks
 The following list includes all the Kubernetes checks with configurable variables that can be changed in the configuration yaml file:
@@ -2,7 +2,7 @@
 title: 'Integrations'
 ---

-## Integration with Slack
+## Integration with Slack

 Prowler can be integrated with [Slack](https://slack.com/) to send a summary of the execution having configured a Slack APP in your channel with the following command:

@@ -14,7 +14,7 @@ prowler <provider> -V/-v/--version

 Prowler provides various execution settings.

-### Verbose Execution
+### Verbose Execution

 To enable verbose mode in Prowler, similar to Version 2, use:

@@ -54,7 +54,7 @@ To run Prowler without color formatting:
 prowler <provider> --no-color
 ```

-### Checks in Prowler
+### Checks in Prowler

 Prowler provides various security checks per cloud provider. Use the following options to list, execute, or exclude specific checks:

@@ -96,7 +96,7 @@ prowler <provider> -e/--excluded-checks ec2 rds
 prowler <provider> -C/--checks-file <checks_list>.json
 ```

-## Custom Checks in Prowler
+## Custom Checks in Prowler

 Prowler supports custom security checks, allowing users to define their own logic.

@@ -19,45 +19,15 @@ The Mutelist option works in combination with other filtering mechanisms and mod

 ## How the Mutelist Works

-The **Mutelist** uses **AND logic** to evaluate whether a finding should be muted. For a finding to be muted, **ALL** of the following conditions must match:
+The **Mutelist** uses both "AND" and "OR" logic to determine which resources, checks, regions, and tags should be muted. For each check, the Mutelist evaluates whether the account, region, and resource match the specified criteria using "AND" logic. If tags are specified, the Mutelist can apply either "AND" or "OR" logic.

- **Account** matches (exact match or `*`)
- **Check** matches (exact match, regex pattern, or `*`)
- **Region** matches (exact match, regex pattern, or `*`)
- **Resource** matches (exact match, regex pattern, or `*`)
- **Tags** match (if specified)
-
-If **any** of these criteria do not match, the finding is **not muted**.
-
-### Tag Matching Logic
-
-Tags have special matching behavior:
-
- **Multiple tags in the list = AND logic**: ALL tags must be present on the resource
-  ```yaml
-  Tags:
-    - "environment=dev"
-    - "team=backend"  # BOTH tags required
-  ```
-
- **Regex alternation within a single tag = OR logic**: Use the pipe operator `|` for OR
-  ```yaml
-  Tags:
-    - "environment=dev|environment=stg"  # Matches EITHER dev OR stg
-  ```
-
- **Complex tag patterns**: Combine AND and OR using regex
-  ```yaml
-  Tags:
-    - "team=backend"  # Required
-    - "environment=dev|environment=stg"  # AND (dev OR stg)
-  ```
+If any of the criteria do not match, the check is not muted.

 <Note>
 Remember that mutelist can be used with regular expressions.

 </Note>
-## Mutelist Specification
+## Mutelist Specification

 <Note>
 - For Azure provider, the Account ID is the Subscription Name and the Region is the Location.
@@ -72,7 +42,7 @@ The Mutelist file uses the [YAML](https://en.wikipedia.org/wiki/YAML) format wit
 ### Resources and tags are lists that can have either Regex or Keywords.
 ### Multiple tags in the list are "ANDed" together (ALL must match).
 ### Use regex alternation (|) within a single tag for "OR" logic (e.g., "env=dev|env=stg").
-### For each check you can use Exceptions to unmute specific Accounts, Regions, Resources and/or Tags.
+### For each check you can use Exceptions to unmute specific Accounts, Regions, Resources and/or Tags.
 ### All conditions (Account, Check, Region, Resource, Tags) are ANDed together.
 ###########################  MUTELIST EXAMPLE  ###########################
 Mutelist:
@@ -179,11 +149,11 @@ Mutelist:

 | Field| Description| Logic
 |----------|----------|----------
-| `account_id`| Use `*` to apply the mutelist to all accounts. Supports exact match or wildcard.| `AND` (with other fields)
-| `check_name`| The name of the Prowler check. Use `*` to apply the mutelist to all checks, or `service_*` to apply it to all service's checks. Supports regex patterns.| `AND` (with other fields)
-| `region`| The region identifier. Use `*` to apply the mutelist to all regions. Supports regex patterns.| `AND` (with other fields)
-| `resource`| The resource identifier. Use `*` to apply the mutelist to all resources. Supports regex patterns.| `AND` (with other fields)
-| `tags`| List of tag patterns in `key=value` format. **Multiple tags = AND** (all must match). **Regex alternation within single tag = OR** (use `tag1\|tag2`).| `AND` between tags, `OR` within regex
+| `account_id`| Use `*` to apply the mutelist to all accounts.| `ANDed`
+| `check_name`| The name of the Prowler check. Use `*` to apply the mutelist to all checks, or `service_*` to apply it to all service's checks.| `ANDed`
+| `region`| The region identifier. Use `*` to apply the mutelist to all regions.| `ANDed`
+| `resource`| The resource identifier. Use `*` to apply the mutelist to all resources.| `ANDed`
+| `tag`| The tag value.| `ORed`

 ### Description

@@ -204,68 +174,6 @@ Replace `<provider>` with the appropriate provider name.
 - The Mutelist can be used in combination with other Prowler options, such as the `--service` or `--checks` option, to further customize the scanning process.
 - Make sure to review and update the Mutelist regularly to ensure it reflects the desired exclusions and remains up to date with your infrastructure.

-## Current Limitations and Workarounds
-
-### Limitation: No OR Logic Between Different Rule Sets
-
-The current Mutelist schema **does not support OR logic** between different condition sets. Each check can have only **one rule object**, and all conditions are **ANDed** together.
-
-**Example of unsupported scenario:**
-```yaml
-# ❌ INVALID: Cannot have multiple rule blocks for the same check
-Accounts:
-  "*":
-    Checks:
-      "*":  # Rule 1
-        Regions: ["eu-west-1", "us-west-2"]
-        Resources: ["*"]
-      "*":  # Rule 2 - This will OVERWRITE Rule 1 (YAML duplicate key)
-        Regions: ["us-east-1"]
-        Tags: ["environment=dev"]
-```
-
-**Workaround: Use multiple scans with different mutelists**
-
-For complex scenarios requiring OR logic, run separate scans:
-
-```bash
-# Scan 1: Mute findings in non-critical regions
-prowler aws --mutelist-file mutelist_noncritical.yaml
-
-# Scan 2: Mute dev/stg in critical regions
-prowler aws --mutelist-file mutelist_critical.yaml --regions us-east-1,sa-east-1
-```
-
-Then merge the outputs in your reporting pipeline.
-
-### Limitation: Cannot Negate Regions
-
-You cannot express "all regions **except** X and Y". You must explicitly list all regions you want to mute.
-
-**Workaround:**
-```yaml
-# Must enumerate all unwanted regions
-Accounts:
-  "*":
-    Checks:
-      "*":
-        Regions:
-          - "af-south-1"
-          - "ap-east-1"
-          # ... list all regions EXCEPT the ones you want to monitor
-        Resources: ["*"]
-```
-
-### Best Practices
-
-1. **Use regex patterns for flexibility**: Instead of listing multiple resources, use regex patterns like `"dev-.*"` or `"test-instance-[0-9]+"`
-
-2. **Combine tag OR logic with regex**: Use `"environment=dev|environment=stg|environment=test"` instead of multiple tag entries
-
-3. **Be specific with exceptions**: Use the `Exceptions` field to unmute specific resources within a broader muting rule
-
-4. **Test your mutelist**: Run Prowler with `--output-modes json` and verify that the expected findings are muted
-
 ## AWS Mutelist

 ### Muting specific AWS regions
@@ -10,7 +10,7 @@ This can help for really large accounts, but please be aware of AWS API rate lim
 2. **API Rate Limits**: Most of the rate limits in AWS are applied at the API level. Each API call to an AWS service counts towards the rate limit for that service.
 3. **Throttling Responses**: When you exceed the rate limit for a service, AWS responds with a throttling error. In AWS SDKs, these are typically represented as `ThrottlingException` or `RateLimitExceeded` errors.

-For information on Prowler's retrier configuration please refer to this [page](https://docs.prowler.cloud/en/latest/tutorials/aws/boto3-configuration/).
+For information on Prowler's retrier configuration please refer to this [page](https://docs.prowler.com/user-guide/providers/aws/boto3-configuration/).

 <Note>
 You might need to increase the `--aws-retries-max-attempts` parameter from the default value of 3. The retrier follows an exponential backoff strategy.
@@ -24,6 +24,6 @@ By default, it extracts resources from all the regions, you could use `-f`/`--fi

 ![Quick Inventory Example](/images/quick-inventory.jpg)

-## Objections
+## Objections

 The inventorying process is carried out with `resourcegroupstaggingapi` calls, which means that only resources they have or have had tags will appear (except for the IAM and S3 resources which are done with Boto3 API calls).
@@ -22,7 +22,7 @@ prowler <provider> --output-formats json-asff

 All compliance-related reports are automatically generated when Prowler is executed. These outputs are stored in the `/output/compliance` directory.

-## Custom Output Flags
+## Custom Output Flags

 By default, Prowler creates a file inside the `output` directory named: `prowler-output-ACCOUNT_NUM-OUTPUT_DATE.format`.

@@ -53,7 +53,7 @@ Both flags can be used simultaneously to provide a custom directory and filename

 By default, the timestamp format of the output files is ISO 8601. This can be changed with the flag `--unix-timestamp` generating the timestamp fields in pure unix timestamp format.

-## Supported Output Formats
+## Supported Output Formats

 Prowler natively supports the following reporting output formats:

@@ -14,7 +14,7 @@ prowler <provider> --scan-unused-services

 ## Services Ignored

-### AWS
+### AWS

 #### ACM (AWS Certificate Manager)

@@ -22,21 +22,21 @@ Certificates stored in ACM without active usage in AWS resources are excluded. B

 - `acm_certificates_expiration_check`

-#### Athena
+#### Athena

 Upon AWS account creation, Athena provisions a default primary workgroup for the user. Prowler verifies if this workgroup is enabled and used by checking for queries within the last 45 days. If Athena is unused, findings related to its checks will not appear.

 - `athena_workgroup_encryption`
 - `athena_workgroup_enforce_configuration`

-#### AWS CloudTrail
+#### AWS CloudTrail

 AWS CloudTrail should have at least one trail with a data event to record all S3 object-level API operations. Before flagging this issue, Prowler verifies if S3 buckets exist in the account.

 - `cloudtrail_s3_dataevents_read_enabled`
 - `cloudtrail_s3_dataevents_write_enabled`

-#### AWS Elastic Compute Cloud (EC2)
+#### AWS Elastic Compute Cloud (EC2)

 If Amazon Elastic Block Store (EBS) default encyption is not enabled, sensitive data at rest will remain unprotected in EC2. However, Prowler will only generate a finding if EBS volumes exist where default encryption could be enforced.

@@ -56,7 +56,7 @@ Prowler scans only attached security groups to report vulnerabilities in activel

    - `ec2_networkacl_allow_ingress_X_port`

-#### AWS Glue
+#### AWS Glue

 AWS Glue best practices recommend encrypting metadata and connection passwords in Data Catalogs.

@@ -71,7 +71,7 @@ Amazon Inspector is a vulnerability discovery service that automates continuous

 - `inspector2_is_enabled`

-#### Amazon Macie
+#### Amazon Macie

 Amazon Macie leverages machine learning to automatically discover, classify, and protect sensitive data in S3 buckets. Prowler only generates findings if Macie is disabled and there are S3 buckets in the AWS account.

@@ -83,7 +83,7 @@ A network firewall is essential for monitoring and controlling traffic within a

 - `networkfirewall_in_all_vpc`

-#### Amazon S3
+#### Amazon S3

 To prevent unintended data exposure:

@@ -91,7 +91,7 @@ Public Access Block should be enabled at the account level. Prowler only checks

 - `s3_account_level_public_access_blocks`

-#### Virtual Private Cloud (VPC)
+#### Virtual Private Cloud (VPC)

 VPC settings directly impact network security and availability.

@@ -2,10 +2,6 @@
 title: "Prowler ThreatScore Documentation"
 ---

-
-
-<Info>This feature is only available in Prowler Cloud/App.</Info>
-
 ## Introduction

 The **Prowler ThreatScore** is a comprehensive compliance scoring system that provides a unified metric for assessing your organization's security posture across compliance frameworks. It aggregates findings from individual security checks into a single, normalized score ranging from 0 to 100.
@@ -53,8 +53,7 @@ For detailed instructions on how to create the Service Principal and configure p

 ### Step 3: Add Credentials to Prowler App

-For Azure, Prowler App uses a service principal application to authenticate. For more information about the process of creating and adding permissions to a service principal refer to this [section](/user-guide/providers/azure/authentication). When you finish creating and adding the [Entra](/user-guide/providers/azure/create-prowler-service-principal#assigning-proper-permissions) and [Subscription](/user-guide/providers/azure/subscriptions) scope permissions to the service principal, enter the `Tenant ID`, `Client ID` and `Client Secret` of the service principal application.
-
+Having completed the [Service Principal setup from the Authentication guide](/user-guide/providers/azure/authentication#service-principal-application-authentication-recommended):

 1. Go to your App Registration overview and copy the `Client ID` and `Tenant ID`

@@ -32,45 +32,35 @@ title: 'Getting Started With GCP on Prowler'

 ### Step 3: Set Up GCP Authentication

-For Google Cloud, first enter your `GCP Project ID` and then select the authentication method you want to use:
+Choose the preferred authentication mode before proceeding:

- **Service Account Authentication** (**Recommended**)
-    * Authenticates as a service identity
-    * Stable and auditable
-    * Recommended for production
- **Application Default Credentials**
-    * Quick scan as current user
-    * Uses Google Cloud CLI authentication
-    * Credentials may time out
+**User Credentials (Application Default Credentials)**

-**Service Account Authentication** is the recommended authentication method for automated systems and machine-to-machine interactions, like Prowler. For detailed information about this, refer to the [Google Cloud documentation](https://cloud.google.com/iam/docs/service-account-overview).
+* Quick scan as current user
+* Uses Google Cloud CLI authentication
+* Credentials may time out

-<img src="/images/prowler-app/gcp-auth-methods.png" alt="GCP Authentication Methods" width="700" />
+**Service Account Key File**

-<Tabs>
-  <Tab title="Service Account Authentication">
-    First of all, in the same project that you selected in the previous step, you need to create a service account and then generate a key in JSON format for it. For more information about this, you can follow the next Google Cloud documentation tutorials:
+* Authenticates as a service identity
+* Stable and auditable
+* Recommended for production

-    - [Create a service account](https://cloud.google.com/iam/docs/creating-managing-service-accounts)
-    - [Generate a key for a service account](https://cloud.google.com/iam/docs/creating-managing-service-account-keys)
+For detailed instructions on how to set up authentication, see [Authentication](/user-guide/providers/gcp/authentication).

-    <img src="/images/prowler-app/gcp-service-account-creds.png" alt="GCP Service Account Credentials" width="700" />
-  </Tab>
-  <Tab title="Application Default Credentials">
-    1. Run the following command in your terminal to authenticate with GCP:
+6. Once credentials are configured, return to Prowler App and enter the required values:

-    ```bash
-    gcloud auth application-default login
-    ```
+    For "Service Account Key":

-    2. Once authenticated, get the `Client ID`, `Client Secret` and `Refresh Token` from `~/.config/gcloud/application_default_credentials`.
+    - `Service Account Key JSON`

-    3. Paste the `Client ID`, `Client Secret` and `Refresh Token` into Prowler App.
+    For "Application Default Credentials":

-    <img src="/images/gcp-credentials.png" alt="GCP Credentials" width="700" />
-  </Tab>
-</Tabs>
+    - `client_id`
+    - `client_secret`
+    - `refresh_token`

+    ![Enter the Credentials](/images/providers/enter-credentials-prowler-cloud.png)

 7. Click "Next", then "Launch Scan"

@@ -1,7 +1,6 @@
 ---
 title: "Getting Started with the IaC Provider"
 ---
-import { VersionBadge } from "/snippets/version-badge.mdx"

 Prowler's Infrastructure as Code (IaC) provider enables scanning of local or remote infrastructure code for security and compliance issues using [Trivy](https://trivy.dev/). This provider supports a wide range of IaC frameworks, allowing assessment of code before deployment.

@@ -23,46 +22,8 @@ The IaC provider leverages [Trivy](https://trivy.dev/latest/docs/scanner/vulnera
 - Mutelist logic ([filtering](https://trivy.dev/latest/docs/configuration/filtering/)) is handled by Trivy, not Prowler.
 - Results are output in the same formats as other Prowler providers (CSV, JSON, HTML, etc.).

-## Prowler App
-
-<VersionBadge version="5.14.0" />
-
-### Step 1: Access Prowler Cloud/App
-
-1. Navigate to [Prowler Cloud](https://cloud.prowler.com/) or launch [Prowler App](/user-guide/tutorials/prowler-app)
-2. Go to "Configuration" > "Cloud Providers"
-
-    ![Cloud Providers Page](/images/prowler-app/cloud-providers-page.png)
-
-3. Click "Add Cloud Provider"
-
-    ![Add a Cloud Provider](/images/prowler-app/add-cloud-provider.png)
-
-4. Select "Infrastructure as Code"
-
-    ![Select Infrastructure as Code](/images/providers/select-iac.png)
-
-5. Add the Repository URL and an optional alias, then click "Next"
-
-    ![Add IaC Repository URL](/images/providers/add-iac-repo.png)
-
-### Step 2: Enter Authentication Details
-
-6. Optionally provide the [authentication](/user-guide/providers/iac/authentication) details for private repositories, then click "Next"
-
-    ![IaC Authentication](/images/providers/iac-authentication.png)
-
-### Step 3: Verify Connection & Start Scan
-
-7. Review the provider configuration and click "Launch scan" to initiate the scan
-
-    ![Verify Connection & Start Scan](/images/providers/iac-verify-connection.png)
-
-
 ## Prowler CLI

-<VersionBadge version="5.8.0" />
-
 ### Usage

 Use the `iac` argument to run Prowler with the IaC provider. Specify the directory or repository to scan, frameworks to include, and paths to exclude.
@@ -1,131 +0,0 @@
---
-title: 'Getting Started with Kubernetes'
---
-
-## Prowler App
-
-### Step 1: Access Prowler Cloud/App
-
-1. Navigate to [Prowler Cloud](https://cloud.prowler.com/) or launch [Prowler App](/user-guide/tutorials/prowler-app)
-2. Go to "Configuration" > "Cloud Providers"
-
-    ![Cloud Providers Page](/images/prowler-app/cloud-providers-page.png)
-
-3. Click "Add Cloud Provider"
-
-    ![Add a Cloud Provider](/images/prowler-app/add-cloud-provider.png)
-
-4. Select "Kubernetes"
-
-5. Enter your Kubernetes Cluster context from your kubeconfig file and optionally provide a friendly alias
-
-### Step 2: Configure Kubernetes Authentication
-
-For Kubernetes, Prowler App uses a `kubeconfig` file to authenticate. Paste the contents of your `kubeconfig` file into the `Kubeconfig content` field.
-
-By default, the `kubeconfig` file is located at `~/.kube/config`.
-
-![Kubernetes Credentials](/images/kubernetes-credentials.png)
-
-### Step 3: Additional Setup for EKS, GKE, AKS, or External Clusters
-
-If you are adding an **EKS**, **GKE**, **AKS** or external cluster, follow these additional steps to ensure proper authentication:
-
-**Make sure your cluster allows traffic from the Prowler Cloud IP address `52.48.254.174/32`**
-
-1. Apply the necessary Kubernetes resources to your EKS, GKE, AKS or external cluster (you can find the files in the [`kubernetes` directory of the Prowler repository](https://github.com/prowler-cloud/prowler/tree/master/kubernetes)):
-
-    ```console
-    kubectl apply -f kubernetes/prowler-sa.yaml
-    kubectl apply -f kubernetes/prowler-role.yaml
-    kubectl apply -f kubernetes/prowler-rolebinding.yaml
-    ```
-
-2. Generate a long-lived token for authentication:
-
-    ```console
-    kubectl create token prowler-sa -n prowler-ns --duration=0
-    ```
-
-    - **Security Note:** The `--duration=0` option generates a non-expiring token, which may pose a security risk if not managed properly. Users should decide on an appropriate expiration time based on their security policies. If a limited-time token is preferred, set `--duration=<TIME>` (e.g., `--duration=24h`).
-    - **Important:** If the token expires, Prowler Cloud will no longer be able to authenticate with the cluster. In this case, you will need to generate a new token and **remove and re-add the provider in Prowler Cloud** with the updated `kubeconfig`.
-
-3. Update your `kubeconfig` to use the ServiceAccount token:
-
-    ```console
-    kubectl config set-credentials prowler-sa --token=<SA_TOKEN>
-    kubectl config set-context <CONTEXT_NAME> --user=prowler-sa
-    ```
-
-    Replace `<SA_TOKEN>` with the generated token and `<CONTEXT_NAME>` with your KubeConfig Context Name of your EKS, GKE or AKS cluster.
-
-4. Add the modified `kubeconfig` in Prowler Cloud and test the connection.
-
-## Prowler CLI
-
-### Non In-Cluster Execution
-
-For execution outside the cluster environment, specify the location of the [kubeconfig](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/) file using the following argument:
-
-```console
-prowler kubernetes --kubeconfig-file /path/to/kubeconfig
-```
-
-<Note>
-If no `--kubeconfig-file` is provided, Prowler will use the default KubeConfig file location (`~/.kube/config`).
-
-</Note>
-
-<Note>
-`prowler` will scan the active Kubernetes context by default. Use the [`--context`](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/kubernetes/context/) flag to specify the context to be scanned.
-
-</Note>
-
-<Note>
-By default, `prowler` will scan all namespaces in your active Kubernetes context. Use the [`--namespace`](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/kubernetes/namespace/) flag to specify the namespace(s) to be scanned.
-
-</Note>
-
-### In-Cluster Execution
-
-For in-cluster execution, use the supplied yaml files inside `/kubernetes`:
-
-* [prowler-sa.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/prowler-sa.yaml)
-* [job.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/job.yaml)
-* [prowler-role.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/prowler-role.yaml)
-* [prowler-rolebinding.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/prowler-rolebinding.yaml)
-
-They can be used to run Prowler as a job within a new Prowler namespace:
-
-```console
-kubectl apply -f kubernetes/prowler-sa.yaml
-kubectl apply -f kubernetes/job.yaml
-kubectl apply -f kubernetes/prowler-role.yaml
-kubectl apply -f kubernetes/prowler-rolebinding.yaml
-kubectl get pods --namespace prowler-ns --> prowler-XXXXX
-kubectl logs prowler-XXXXX --namespace prowler-ns
-```
-
-<Note>
-By default, `prowler` will scan all namespaces in your active Kubernetes context. Use the [`--namespace`](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/kubernetes/namespace/) flag to specify the namespace(s) to be scanned.
-
-</Note>
-<Tip>
-**Identifying the cluster in reports**
-
-When running in in-cluster mode, the Kubernetes API does not expose the actual cluster name by default.
-
-To uniquely identify the cluster in logs and reports:
-
- Use the `--cluster-name` flag to manually set the cluster name:
-```bash
-prowler -p kubernetes --cluster-name production-cluster
-```
- Or set the `CLUSTER_NAME` environment variable:
-```yaml
-env:
-    - name: CLUSTER_NAME
-      value: production-cluster
-```
-
-</Tip>
@@ -0,0 +1,45 @@
+---
+title: 'In-Cluster Execution'
+---
+
+For in-cluster execution, use the supplied yaml files inside `/kubernetes`:
+
+* [prowler-sa.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/prowler-sa.yaml)
+* [job.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/job.yaml)
+* [prowler-role.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/prowler-role.yaml)
+* [prowler-rolebinding.yaml](https://github.com/prowler-cloud/prowler/blob/master/kubernetes/prowler-rolebinding.yaml)
+
+They can be used to run Prowler as a job within a new Prowler namespace:
+
+```console
+kubectl apply -f kubernetes/prowler-sa.yaml
+kubectl apply -f kubernetes/job.yaml
+kubectl apply -f kubernetes/prowler-role.yaml
+kubectl apply -f kubernetes/prowler-rolebinding.yaml
+kubectl get pods --namespace prowler-ns --> prowler-XXXXX
+kubectl logs prowler-XXXXX --namespace prowler-ns
+```
+
+<Note>
+By default, `prowler` will scan all namespaces in your active Kubernetes context. Use the [`--namespace`](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/kubernetes/namespace/) flag to specify the namespace(s) to be scanned.
+
+</Note>
+<Tip>
+**Identifying the cluster in reports**
+
+When running in in-cluster mode, the Kubernetes API does not expose the actual cluster name by default.
+
+To uniquely identify the cluster in logs and reports, you can:
+
+- Use the `--cluster-name` flag to manually set the cluster name:
+```bash
+prowler -p kubernetes --cluster-name production-cluster
+```
+- Or set the `CLUSTER_NAME` environment variable:
+```yaml
+env:
+    - name: CLUSTER_NAME
+      value: production-cluster
+```
+
+</Tip>
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Pedro Martín	80829c07e6	Merge branch 'v5.13' into backport/v5.13/pr-9208	2025-11-19 14:29:11 +01:00
Prowler BotandDaniel Barranquero	0a034a173c	fix: split `file_name` not working on Windows (#9269 ) Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>	2025-11-18 14:49:49 +01:00
Prowler Bot Marc Espin Andoni A.	3266caa818	fix(docs): Fix dead links leading to `docs.prowler.cloud` (#9242 ) Co-authored-by: Marc Espin <mespinsanz@gmail.com> Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>	2025-11-17 12:29:49 +01:00
Prowler BotandDaniel Barranquero	9a42257af6	fix(azure): validation and other errors in cosmosdb, defender, storage and vm (#9232 ) Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>	2025-11-13 09:29:17 -05:00
Pedro Martín	b413381f91	fix(compliance): handle check_id not in Prowler Checks (#9208 ) (cherry picked from commit `427dab6810`) # Conflicts: # api/CHANGELOG.md	2025-11-12 08:12:30 +00:00
Prowler Bot Shaun shaun MrCloudSec	2c57f4edda	fix(aws): false negative in `iam_role_cross_service_confused_deputy_prevention` (#9217 ) Co-authored-by: Shaun <39968858+snotrauk@users.noreply.github.com> Co-authored-by: shaun <shaun@snotra.cloud> Co-authored-by: MrCloudSec <hello@mistercloudsec.com>	2025-11-11 22:10:00 -05:00
Prowler BotandSergio Garcia	d9d450d158	fix(html): rename `get_oci_assessment_summary` (#9201 ) Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>	2025-11-10 10:45:55 -05:00
Prowler BotandHugo Pereira Brito	6d5a2a94de	fix(m365_powershell): teams connection with `--sp-env-auth` and enhanced timeouts error logging (#9195 ) Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>	2025-11-10 11:31:06 +01:00
Prowler BotandHugo Pereira Brito	8f0d760705	fix(powershell): depth truncation and parsing error (#9188 ) Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>	2025-11-07 13:36:11 +01:00
Prowler Bot Hugo Pereira Brito Daniel Barranquero	28eb1eeb85	fix(gcp): check `check_name` has no `resource_name` error (#9178 ) Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com> Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>	2025-11-06 13:05:15 +01:00
César Arroba	7f54a269de	chore(github): sync .github folder from master to v5.13 (#9175 )	2025-11-06 10:01:43 +01:00
Prowler BotandCésar Arroba	b1188538a5	chore(github): improve container slack notifications (#9174 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-11-06 09:36:51 +01:00
Prowler Botandprowler-bot	986dfaafe7	chore(release): Bump version to v5.13.2 (#9160 ) Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>	2025-11-04 15:15:56 +01:00
Pedro Martín	a157f5c6f8	chore(changelog): update with latest changes (#9157 )	2025-11-04 13:23:25 +01:00
Prowler Bot César Arroba César Arroba	9e3e24bfcd	chore(github): fix trivy action (#9068 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com> Co-authored-by: César Arroba <cesar@prowler.com>	2025-11-04 12:46:31 +01:00
Prowler BotandCésar Arroba	506c52ecb4	chore(github): fix actions paths (#9156 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-11-04 12:37:23 +01:00
Josema Camacho	8657a9c185	chore(release): Upgrade Prowler API versions to 1.14.1 for releasing Prowler 5.13.1 (#9150 )	2025-11-04 12:08:55 +01:00
Prowler BotandCésar Arroba	b58023e90c	chore(github): missed conditional on sdk container action (#9122 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-31 11:48:30 +01:00
Prowler BotandCésar Arroba	7055e28e09	chore(sdk): allow sdk checks only on prowler repository (#9119 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-31 11:48:03 +01:00
César Arroba	08ee5c9a43	chore: fix conflicts (#9121 )	2025-10-31 11:43:29 +01:00
Prowler BotandCésar Arroba	4a35b21367	chore(github): rename jobs to know which component they belong (#9118 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-31 11:38:08 +01:00
Prowler BotandVíctor Fernández Poyatos	e06e4c46d4	feat(rls-transaction): add retry for read replica connections (#9115 ) Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>	2025-10-31 11:23:40 +01:00
Prowler BotandCésar Arroba	59c734be11	chore(github): separate ui pr jobs in different actions (#9105 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-30 16:46:57 +01:00
Prowler BotandCésar Arroba	b3e532bb4f	chore(github): separate sdk pr jobs in different actions (#9102 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-30 16:46:33 +01:00
Prowler BotandCésar Arroba	c1abd8c1a4	chore(github): separate api pr jobs in different actions (#9103 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-30 16:46:18 +01:00
Prowler BotandCésar Arroba	3abf545fe2	chore(github): separate mcp pr jobs in different actions (#9104 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-30 16:37:36 +01:00
Prowler BotandAdrián Jesús Peña Rodríguez	1cecb3899b	fix(api): update database routing logic in MainRouter (#9090 ) Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>	2025-10-30 12:44:26 +01:00
Prowler BotandAdrián Jesús Peña Rodríguez	717d81fa9c	fix(api): enhance overview provider aggregation and resource counting (#9055 ) Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>	2025-10-30 12:38:47 +01:00
Prowler Bot Hugo Pereira Brito César Arroba	ee78bc6c01	fix(m365): `admincenter` service unnecessary `msgraph` calls and repeated `resource_id` (#9067 ) Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com> Co-authored-by: César Arroba <cesar@prowler.com>	2025-10-30 11:15:33 +01:00
Prowler BotandCésar Arroba	64efd09918	chore: revert files ignore action removal (#9071 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-29 15:28:01 +01:00
Prowler BotandCésar Arroba	cd48708f27	chore(github): improve trivy scan time (#9069 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-29 14:56:10 +01:00
Prowler BotandCésar Arroba	118289cc5e	chore(github): improve sdk pull request action (#9057 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-29 11:22:14 +01:00
Prowler BotandCésar Arroba	fef46ed9f0	chore(github): improve UI pull request action (#9056 ) Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>	2025-10-29 11:09:54 +01:00
Prowler BotandPedro Martín	0e1be9584f	fix(gcp): set unknown for resource name under metric resources (#9049 ) Co-authored-by: Pedro Martín <pedromarting3@gmail.com>	2025-10-29 10:15:12 +01:00
Prowler BotandPedro Martín	a0f9136cbf	fix(compliance): handle timestamp when transforming CCC findings (#9050 ) Co-authored-by: Pedro Martín <pedromarting3@gmail.com>	2025-10-29 10:10:05 +01:00
Prowler BotandDaniel Barranquero	32b61e91ff	fix(ec2): AttributeError in `ec2_instance_with_outdated_ami` check (#9048 ) Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>	2025-10-28 13:20:15 -04:00
Prowler Botandprowler-bot	1c5b515a9c	chore(release): Bump version to v5.13.1 (#9016 ) Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>	2025-10-24 16:16:48 +05:45
Prowler Bot prowler-bot Pepe Fagoaga	37a3a69ce5	chore(api): Update prowler dependency to v5.13 for release 5.13.0 (#8997 ) Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com> Co-authored-by: Pepe Fagoaga <pepe@prowler.com>	2025-10-23 18:30:10 +05:45