Merge master

fix(mongodbatlas): keep Atlas error detail on identity (#13214 )
fix(container): bump Python base image to 3.12.16 (#13215 )
2026-11-03 09:54:44 +00:00 · 2026-11-02 07:09:02 +00:00 · 2026-10-30 13:03:15 +01:00 · 2026-10-30 12:37:56 +01:00 · 2026-10-30 10:03:31 +01:00 · 2026-10-29 16:37:40 +01:00
239 changed files with 2018 additions and 1487 deletions
@@ -174,7 +174,7 @@ SENTRY_RELEASE=local
 # REO_DEV_CLIENT_ID=

 #### Prowler release version ####
-NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.47.1
+NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.48.0

 # Social login credentials
 SOCIAL_GOOGLE_OAUTH_CALLBACK_URL="${AUTH_URL}/api/auth/callback/google"
@@ -1,4 +1,4 @@
-FROM python:3.12.15-slim-trixie@sha256:05cda9777409a9c3ffddd94a4c476b79f0769a0b4857f0c7ed9226b6800b0d6f AS build
+FROM python:3.12.16-slim-trixie@sha256:8523d6abeb48ceae0b7240d30c5808fc26cb79c1a635bacdf19cf3baecfbec07 AS build

 LABEL maintainer="https://github.com/prowler-cloud/prowler"
 LABEL org.opencontainers.image.source="https://github.com/prowler-cloud/prowler"
@@ -1,4 +1,4 @@
-FROM python:3.12.15-slim-trixie@sha256:05cda9777409a9c3ffddd94a4c476b79f0769a0b4857f0c7ed9226b6800b0d6f AS build
+FROM python:3.12.16-slim-trixie@sha256:8523d6abeb48ceae0b7240d30c5808fc26cb79c1a635bacdf19cf3baecfbec07 AS build

 LABEL maintainer="https://github.com/prowler-cloud/api"

@@ -0,0 +1 @@
+Python base image from 3.12.15 to 3.12.16 in the API container image, patching CVE-2026-115557
@@ -45,7 +45,7 @@ dependencies = [
  "gunicorn==26.0.0",
  "uvloop==0.22.1",
  "lxml==6.1.0",
-  "prowler @ git+https://github.com/prowler-cloud/prowler.git@v5.47",
+  "prowler @ git+https://github.com/prowler-cloud/prowler.git@master",
  "psycopg2-binary==2.9.9",
  "pytest-celery[redis] (==1.3.0)",
  "sentry-sdk[django] (==2.56.0)",
@@ -71,7 +71,7 @@ name = "prowler-api"
 package-mode = false
 # Needed for the SDK compatibility
 requires-python = ">=3.11,<3.13"
-version = "1.48.1"
+version = "1.49.0"

 # Shared ruff baseline (kept in sync with mcp_server/pyproject.toml).
 # target-version tracks this project's lowest supported Python.
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
  title: Prowler API
-  version: 1.48.1
+  version: 1.49.0
  description: |-
    Prowler API specification.

@@ -1229,20 +1229,6 @@ wheels = [
    { url = "https://files.pythonhosted.org/packages/32/b3/8ec1268082f4d20cc8bf723a1a8e6b9e330bcc338a4dbcee9c7737e9dc1c/azure_mgmt_authorization-4.0.0-py3-none-any.whl", hash = "sha256:d8feeb3842e6ddf1a370963ca4f61fb6edc124e8997b807dd025bc9b2379cd1a", size = 1072620, upload-time = "2023-07-25T04:47:49.26Z" },
 ]

-[[package]]
-name = "azure-mgmt-cognitiveservices"
-version = "14.1.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "azure-mgmt-core" },
-    { name = "msrest" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/fa/8e/9fcfdd507413a2536c5458b40942705ea8d74fe4e17f05fd1c32bb0225a9/azure_mgmt_cognitiveservices-14.1.0.tar.gz", hash = "sha256:915191374d0adb443863c20aaea2c9f3b9d558a849ac2b78f152249262fdcaf8", size = 184444, upload-time = "2025-10-24T07:28:14.229Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d3/25/ed6bbc01a03991255dd22aa41091360d225f1be20c88710af0f4a6c27459/azure_mgmt_cognitiveservices-14.1.0-py3-none-any.whl", hash = "sha256:3c0eecc00d183842a11d754f4f5c3328ff86f2d6c0a2b81b28dd7e073680258e", size = 290096, upload-time = "2025-10-24T07:28:15.766Z" },
-]
-
 [[package]]
 name = "azure-mgmt-compute"
 version = "34.0.0"
@@ -3517,17 +3503,6 @@ wheels = [
    { url = "https://files.pythonhosted.org/packages/18/7d/721f162c46e3de604a73674223bf6c6bc6cf7ade25b3751a71288f4dd122/huaweicloudsdkrds-3.1.204-py3-none-any.whl", hash = "sha256:a790b5b3c457a608e5679c101f463b4d037dd9a8a66f6e46144a9e5a4b37780f", size = 1626906, upload-time = "2026-07-09T09:04:06.936Z" },
 ]

-[[package]]
-name = "huaweicloudsdksmn"
-version = "3.1.204"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "huaweicloudsdkcore" },
-]
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e9/5d/c0de47d011f1932c9c0ddf669c238d9fad01653d438d38203703526799d7/huaweicloudsdksmn-3.1.204-py3-none-any.whl", hash = "sha256:b0818ea9293e27458c8fa1d2da021c98006cbf9ce01cf17a0f1df598c4da3a6c", size = 323674, upload-time = "2026-07-09T09:04:24.804Z" },
-]
-
 [[package]]
 name = "huaweicloudsdkvpc"
 version = "3.1.204"
@@ -4867,8 +4842,8 @@ wheels = [

 [[package]]
 name = "prowler"
-version = "5.47.0"
-source = { git = "https://github.com/prowler-cloud/prowler.git?rev=v5.47#1a62d7d99aea56db8e351f25f3ff385db7549fc6" }
+version = "5.41.0"
+source = { git = "https://github.com/prowler-cloud/prowler.git?rev=master#f05a490cd74a2c0f11a5d66d8ce29d03fa5c64a2" }
 dependencies = [
    { name = "alibabacloud-actiontrail20200706" },
    { name = "alibabacloud-credentials" },
@@ -4889,7 +4864,6 @@ dependencies = [
    { name = "azure-mgmt-apimanagement" },
    { name = "azure-mgmt-applicationinsights" },
    { name = "azure-mgmt-authorization" },
-    { name = "azure-mgmt-cognitiveservices" },
    { name = "azure-mgmt-compute" },
    { name = "azure-mgmt-containerregistry" },
    { name = "azure-mgmt-containerservice" },
@@ -4933,7 +4907,6 @@ dependencies = [
    { name = "huaweicloudsdkkms" },
    { name = "huaweicloudsdkobs" },
    { name = "huaweicloudsdkrds" },
-    { name = "huaweicloudsdksmn" },
    { name = "huaweicloudsdkvpc" },
    { name = "huaweicloudsdkwaf" },
    { name = "jsonschema" },
@@ -4972,7 +4945,7 @@ dependencies = [

 [[package]]
 name = "prowler-api"
-version = "1.48.1"
+version = "1.49.0"
 source = { virtual = "." }
 dependencies = [
    { name = "cartography" },
@@ -5072,7 +5045,7 @@ requires-dist = [
    { name = "matplotlib", specifier = "==3.10.8" },
    { name = "neo4j", specifier = "==6.1.0" },
    { name = "openai", specifier = "==1.109.1" },
-    { name = "prowler", git = "https://github.com/prowler-cloud/prowler.git?rev=v5.47" },
+    { name = "prowler", git = "https://github.com/prowler-cloud/prowler.git?rev=master" },
    { name = "psycopg2-binary", specifier = "==2.9.9" },
    { name = "pytest-celery", extras = ["redis"], specifier = "==1.3.0" },
    { name = "reportlab", specifier = "==4.4.10" },
@@ -1,9 +1,65 @@
 ---
 title: "Changelog"
-description: "New features and improvements in each Prowler release"
+description: "Track new features, improvements, provider updates, and bug fixes shipped in each Prowler release across CLI, App, Cloud, and MCP products."
 rss: true
 ---

+<Update label="v5.47.0" description="October 29, 2026">
+  ### 🧭 Add Provider — One Step to Connect Any Provider
+
+  The add-provider wizard follows the same model for every provider: one connect step, then the launch step. Adding an Azure subscription used to take six screens; now the account, its alias and its credentials are one form, and a single submit registers the account, stores the secret and tests the connection.
+
+  - A failed connection test shows inline, keeps the values and turns the action into **Retry connection** without registering the account twice.
+  - Access methods show as cards on the same step for AWS, GCP, Microsoft 365, GitHub, Alibaba Cloud and Cloudflare, and AWS, Azure and GCP switch to their organization flow through tabs.
+  - Users with the Manage Account permission can invite a teammate to finish the connection for every provider, not only AWS.
+  - **Ask Lighthouse AI** opens beside the wizard without closing it. It guides the connection from the Prowler docs by default and, when asked, connects the provider itself after confirming the provider, UID and credential field names, never echoing a secret back.
+  - Product tours and the guided onboarding sequence are removed; new tenants still land on the add-provider wizard.
+
+  ### 🎯 Issues — Verdicts Explained in the List
+
+  <Note>
+  This feature is available exclusively in **Prowler Cloud** and **Prowler Private Cloud** with a [subscription](https://prowler.com/pricing).
+  </Note>
+
+  - The issue list leads with the verdict, shows the attack path under each title and adds a **Why** column with the five evidence legs, so the reason for a verdict reads without opening the issue. The summary tiles become one line with the folded findings and the findings already covered by a control.
+  - A row opens in the side panel, next to Lighthouse AI, with the verdict, legs, remediation, triage and an **Attack path** tab with the issue graph, instead of expanding the issue inline.
+  - The menu entry is renamed to **Exploitability issues**.
+
+  ### ☁️ Azure and AWS Checks
+
+  - `network_application_gateway_waf_enabled` and `network_application_gateway_http2_enabled` cover Azure Application Gateways and their WAF policies, mapped to CIS 5.0 and 6.0. Contributed by @BabafemiB. Thank you!
+  - `iam_subscription_owners_between_2_and_3` verifies that each Azure subscription has between two and three Owners, counting owners inherited from management groups, mapped to CIS 5.0 and 6.0. Contributed by @BabafemiB. Thank you!
+  - The AWS security group internet exposure checks treat CIDRs in one ingress rule that together cover `0.0.0.0/0` or `::/0`, such as `0.0.0.0/1` plus `128.0.0.0/1`, as open to the internet; such a rule used to pass `ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22` and its siblings. Contributed by @harshrajdebug. Thank you!
+
+  Explore all checks at [Prowler Hub](https://hub.prowler.com/check).
+
+  ### 🛠️ Improvements and Fixes
+
+  - Every MCP Server tool declares `readOnlyHint` and `destructiveHint`, so clients can tell a listing from a write when deciding whether to ask the user. Mutelist and mute rule writes are marked destructive because they hide findings for good.
+  - The cross-provider compliance tab keeps the frameworks that loaded, with a warning, when one catalog page or framework fails, instead of going blank.
+  - The NATO D32 compliance framework has its own icon on the compliance cards.
+  - Lighthouse AI replies no longer blink when the response finishes streaming, and the user avatar no longer requests the current page as an image, which rendered every page twice.
+  - The Invitations page uses **Status** instead of **State**, and the Invitations and Roles filters show capitalized options.
+  - **Prowler Cloud:** actions refused because the tenant is over its plan's usage limit, such as launching a scan, saving a schedule, adding a provider or triaging a finding, now link to the plans page.
+  - **Prowler Cloud:** creating API keys is a Prowler Cloud feature; on Local Server the button opens the upgrade dialog, and existing keys can still be edited and revoked.
+  - **Prowler Cloud:** issue evaluation after a scan reads the scan's findings through their indexes instead of a server-side cursor that took hours on large scans, so the evaluations no longer queue up behind each other.
+  - **Prowler Private Cloud:** Lighthouse AI can use Amazon Bedrock with only a region, relying on the installation's own AWS role, when the API allows it.
+
+  ### 🔐 Security Updates
+
+  - `pymongo` upgraded to 4.18.3, `dnspython` to 2.9.0 and `oauthlib` to 4.0.0 in the SDK and the API container image, patching the BSON decoding and DNS compression pointer denial of service advisories and the OAuth device flow token disclosure. The API also moves `django-allauth` to 65.19.7, since earlier releases cap `oauthlib` below 4.
+  - `Authlib` upgraded to 1.9.1 and `dnspython` to 2.9.0 in the MCP Server container image, patching CVE-2026-96760 (critical), CVE-2026-114615, CVE-2026-114616 and CVE-2026-114605.
+
+  ### 🙌 External Contributors
+
+  Thank you to our community contributors for this release!
+
+  - @BabafemiB: Azure `network_application_gateway_waf_enabled`, `network_application_gateway_http2_enabled` and `iam_subscription_owners_between_2_and_3` checks ([#13160](https://github.com/prowler-cloud/prowler/pull/13160), [#13145](https://github.com/prowler-cloud/prowler/pull/13145))
+  - @harshrajdebug: AWS security group internet exposure fix for split CIDRs ([#13191](https://github.com/prowler-cloud/prowler/pull/13191))
+
+  See the [full release notes on GitHub](https://github.com/prowler-cloud/prowler/releases/tag/5.47.0) for the complete list of changes.
+</Update>
+
 <Update label="v5.46.0" description="October 26, 2026">
  ### 🎯 Issues — Attack Paths with an Exploitability Verdict

@@ -1,5 +1,6 @@
 ---
-title: 'AI Skills System'
+title: 'AI Skills System for Prowler Contributors'
+description: 'Enable AI coding assistants like Claude Code, Cursor, and Copilot to follow Prowler patterns using structured skills, setup scripts, and triggers.'
 ---

 This guide explains the AI Skills system that provides on-demand context and patterns to AI agents working with the Prowler codebase.
@@ -1,5 +1,6 @@
 ---
-title: 'Alibaba Cloud Provider'
+title: 'Alibaba Cloud Provider Implementation'
+description: 'Explore the Alibaba Cloud provider in Prowler, covering session management, RAM authentication, STS credentials, region discovery, and service classes.'
 ---

 This page details the [Alibaba Cloud](https://www.alibabacloud.com/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
 title: "Attack Paths Queries"
+description: "Write and maintain read-only openCypher Attack Paths queries in Prowler that traverse the Cartography cloud graph to detect privilege escalation and exposure."
 ---

 This guide explains how to write and maintain Prowler Attack Paths queries: the read-only openCypher queries that traverse the Cartography-ingested cloud graph to detect privilege escalation chains, network exposure, and other graph-shaped security risks.
@@ -1,5 +1,6 @@
 ---
-title: 'AWS Provider'
+title: 'AWS Provider Implementation'
+description: 'Understand the AWS provider internals in Prowler: boto3 sessions, IAM role assumption, region and Organizations discovery, and service base classes.'
 ---

 In this page you can find all the details about [Amazon Web Services (AWS)](https://aws.amazon.com/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Azure Provider'
+title: 'Azure Provider Implementation'
+description: 'Learn how the Azure provider in Prowler manages Service Principal, CLI, browser, and Managed Identity auth, subscription discovery, and Entra ID scanning.'
 ---

 In this page you can find all the details about [Microsoft Azure](https://azure.microsoft.com/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Check Metadata Guidelines'
+title: 'Check Metadata Writing Guidelines'
+description: 'Follow Prowler conventions for writing check titles, descriptions, risk, remediation, and status_extended fields when authoring check metadata JSON files.'
 ---

 ## Introduction
@@ -1,5 +1,6 @@
 ---
-title: 'Prowler Checks'
+title: 'Creating New Prowler Checks'
+description: 'Step-by-step guide to add a new security check to Prowler, covering folder structure, naming conventions, metadata files, test scenarios, and CLI validation.'
 ---

 This guide explains how to create new checks in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Configurable Checks in Prowler'
+title: 'Configurable Checks with audit_config'
+description: 'Make Prowler checks configurable through the audit_config object and config.yaml, letting users override thresholds, defaults, and check behavior at scan time.'
 ---

 Prowler empowers users to extend and adapt cloud security coverage by making checks configurable through the use of the `audit_config` object. This approach enables customization of checks to meet specific requirements through a configuration file.
@@ -1,5 +1,6 @@
 ---
-title: 'Debugging in Prowler'
+title: 'Debugging Prowler with VSCode'
+description: 'Set up Visual Studio Code launch configurations and debugpy to step through Prowler checks, services, and provider code for AWS, Azure, GCP, and more.'
 ---

 Debugging in Prowler simplifies the development process, allowing developers to efficiently inspect and resolve unexpected issues during execution.
@@ -1,5 +1,6 @@
 ---
-title: 'Contributing to Documentation'
+title: 'Contributing to Prowler Documentation'
+description: 'Contribute to Prowler docs built with Mintlify: learn the section structure, AI agent guidelines, local preview setup, and style conventions for MDX pages.'
 ---

 Prowler documentation is built using [Mintlify](https://www.mintlify.com/docs), allowing contributors to easily add or enhance documentation.
@@ -1,5 +1,6 @@
 ---
-title: 'End-2-End Tests for Prowler Local Server'
+title: 'End-to-End Tests for Prowler App'
+description: 'Write Playwright end-to-end tests for Prowler App covering user journeys, Page Object Models, storage state reuse, and organizing spec files by feature area.'
 ---

 End-to-end (E2E) tests validate complete user flows in Prowler Local Server (UI + API). These tests are implemented with [Playwright](https://playwright.dev/) under the `ui/tests` folder and are designed to run against a Prowler Local Server environment.
@@ -1,5 +1,6 @@
 ---
-title: 'Environment Variable Naming Convention'
+title: 'Environment Variable Naming Conventions'
+description: 'Namespace Prowler App, API, SDK, and MCP Server environment variables with component prefixes like UI_ and API_ to avoid conflicts in a shared .env file.'
 ---

 Prowler is a monorepo composed of several runtime components — Prowler Local Server (the web user interface), Prowler API (the backend), Prowler SDK, and Prowler MCP Server (Model Context Protocol) — that frequently share a single `.env` file. To keep that shared configuration unambiguous, each component namespaces its environment variables with a component-specific prefix.
@@ -1,5 +1,6 @@
 ---
-title: 'Google Cloud Provider'
+title: 'Google Cloud (GCP) Provider Implementation'
+description: 'Dive into the GCP provider in Prowler: Application Default Credentials, service accounts, OAuth, impersonation, and multi-project and organization discovery.'
 ---

 This page details the [Google Cloud Platform (GCP)](https://cloud.google.com/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'GitHub Provider'
+title: 'GitHub Provider Implementation'
+description: 'See how the GitHub provider in Prowler handles Personal Access Token, OAuth App, and GitHub App authentication to audit repositories and organizations.'
 ---

 This page details the [GitHub](https://github.com/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Integration Tests'
+title: 'Integration Tests for Prowler'
+description: 'Placeholder page tracking upcoming guidance on Prowler integration tests, covering how to validate multi-component flows across the SDK, API, and UI.'
 ---

 Coming soon ...
@@ -1,5 +1,6 @@
 ---
-title: 'Creating a New Integration'
+title: 'Creating New Prowler Integrations'
+description: 'Build integrations that ship Prowler findings to Slack, Jira, AWS Security Hub, and other platforms by scripting API calls and configuring output pipelines.'
 ---

 ## Introduction
@@ -1,5 +1,6 @@
 ---
-title: 'Introduction to developing in Prowler'
+title: 'Introduction to Developing in Prowler'
+description: 'Get started as a Prowler contributor: pick a good first issue, extend checks, services, or integrations, and follow the AI-driven contribution workflow.'
 ---

 Thanks for your interest in contributing to Prowler!
@@ -1,5 +1,6 @@
 ---
-title: 'Kubernetes Provider'
+title: 'Kubernetes Provider Implementation'
+description: 'Explore the Kubernetes provider in Prowler, including kubeconfig context loading, namespace discovery, in-cluster execution, and service class scaffolding.'
 ---

 This page details the [Kubernetes](https://kubernetes.io/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Lighthouse AI Architecture'
+title: 'Prowler Lighthouse AI Architecture'
+description: 'Inside Prowler Lighthouse AI: a three-tier Next.js, API route, and Langchain agent design that connects LLMs to security data through MCP tool calls.'
 ---

 This document describes the internal architecture of Prowler Lighthouse AI, enabling developers to understand how components interact and where to add new functionality.
@@ -1,5 +1,6 @@
 ---
-title: 'LLM Provider'
+title: 'LLM Provider Implementation'
+description: 'Learn how the Prowler LLM provider uses promptfoo to run red team security tests against OpenAI and other large language models with reusable test suites.'
 ---

 This page details the [Large Language Model (LLM)](https://en.wikipedia.org/wiki/Large_language_model) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Microsoft 365 (M365) Provider'
+title: 'Microsoft 365 (M365) Provider Implementation'
+description: 'Understand the Microsoft 365 provider in Prowler, PowerShell 7.4+ requirements, Exchange Online and Teams modules, and Entra ID tenant scanning.'
 ---

 This page details the [Microsoft 365 (M365)](https://www.microsoft.com/en-us/microsoft-365) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Extending the MCP Server'
+title: 'Extending the Prowler MCP Server'
+description: 'Add new tools and sub-servers to the Prowler MCP Server so AI assistants like Claude Desktop and Cursor can query Prowler App, Hub, and documentation content.'
 ---

 This guide explains how to extend the Prowler MCP Server with new tools and features.
@@ -1,5 +1,6 @@
 ---
-title: 'Create a Custom Output Format'
+title: 'Creating Custom Prowler Output Formats'
+description: 'Add a new output format to Prowler by subclassing the Output class, defining the schema, and generating JSON, CSV, HTML, or SARIF-style reports from findings.'
 ---

 ## Introduction
@@ -1,5 +1,6 @@
 ---
-title: 'Prowler Providers'
+title: 'Creating New Prowler Providers'
+description: 'Design and implement new Prowler providers across cloud, SaaS, and container platforms, following the base Provider class patterns, models, and CLI wiring.'
 ---

 ## Introduction
@@ -1,5 +1,6 @@
 ---
-title: 'Prowler Studio'
+title: 'Prowler Studio AI Check Workflow'
+description: 'Prowler Studio is a Claude Code workflow that generates consistent, tested Prowler security checks by enforcing skills, guardrails, and provider conventions.'
 ---

 **Prowler Studio is an AI workflow that ensures Claude Code follows Prowler's skills, guardrails, and best practices when creating new security checks.** What lands in the resulting pull request is consistent, tested, and ready for human review — not half-correct boilerplate that needs to be rewritten.
@@ -1,5 +1,6 @@
 ---
-title: 'Renaming Checks in Prowler'
+title: 'Renaming Existing Prowler Checks'
+description: 'Safely rename a Prowler check by updating folder paths, class names, metadata JSON, CheckAliases, and compliance mappings without breaking existing users.'
 ---

 To rename a check in Prowler, follow these steps when aligning with Check ID structure, fixing typos, or updating check logic that requires a new name.
@@ -1,5 +1,6 @@
 ---
-title: 'Secret-Scanning Checks'
+title: 'Building Secret-Scanning Checks'
+description: 'Author efficient secret-scanning checks in Prowler using the Kingfisher engine and detect_secrets_scan_batch helper to scan payloads in chunked subprocesses.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,5 +1,6 @@
 ---
-title: 'Creating a New Security Compliance Framework in Prowler'
+title: 'Adding New Compliance Frameworks to Prowler'
+description: 'Map catalogs like CIS, NIST 800-53, PCI DSS, or DORA into Prowler by defining JSON schemas, Pydantic models, check mappings, and validation tests.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,5 +1,6 @@
 ---
-title: 'Server-Sent Events (SSE)'
+title: 'Adding Server-Sent Events (SSE) Endpoints'
+description: 'Stream real-time updates from the Prowler API using Server-Sent Events with django-eventstream, including scan progress and streamed LLM token output.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,5 +1,6 @@
 ---
-title: 'Prowler Services'
+title: 'Creating New Prowler Services'
+description: 'Add new services like EC2 or Exchange Online to a Prowler provider by scaffolding the service class, data models, API client calls, and shared client instances.'
 ---

 Here you can find how to create a new service, or to complement an existing one, for a [Prowler Provider](/developer-guide/provider).
@@ -1,5 +1,6 @@
 ---
-title: 'StackIT Provider'
+title: 'StackIT Cloud Provider Implementation'
+description: 'Discover how the StackIT provider in Prowler authenticates using service account keys, manages token refresh via the SDK, and audits a single StackIT project.'
 ---

 This page details the [StackIT Cloud](https://www.stackit.de/) provider implementation in Prowler.
@@ -1,5 +1,6 @@
 ---
-title: 'Test Impact Analysis'
+title: 'Test Impact Analysis in CI'
+description: 'Prowler test impact analysis maps changed files to relevant SDK, API, and Playwright E2E tests through a GitHub Actions workflow and configurable path rules.'
 ---

 Test impact analysis (TIA) determines which tests to run based on the files changed in a pull request. Instead of running the full test suite on every pull request, TIA maps changed files to the specific Prowler SDK, API, and end-to-end (E2E) tests that cover them. This approach reduces continuous integration (CI) time and resource usage while maintaining confidence that relevant code paths are tested.
@@ -1,5 +1,6 @@
 ---
-title: 'Unit Tests for Prowler Checks'
+title: 'Writing Unit Tests for Prowler Checks'
+description: 'Write robust unit tests for Prowler checks with pytest and mock, covering zero-finding, PASS, FAIL, and multi-resource scenarios across every provider.'
 ---

 Unit tests for Prowler checks vary based on the provider being evaluated.
@@ -1,5 +1,6 @@
 ---
-title: 'Basic Usage'
+title: 'Get started with the Prowler App web interface'
+description: 'Sign up, add a cloud provider, launch a scan, and review findings in the Prowler App web UI for AWS, Azure, GCP, Kubernetes, and Microsoft 365.'
 ---

 ## Access Prowler Local Server
@@ -1,5 +1,6 @@
 ---
-title: 'Basic Usage'
+title: 'Run scans with the Prowler CLI'
+description: 'Learn the essential Prowler CLI commands to run multi-cloud security scans, list checks and services, and export CSV, JSON-OCSF, and HTML reports.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,5 +1,6 @@
 ---
-title: "Tools Reference"
+title: 'Prowler MCP Server tools reference'
+description: 'Complete reference for Prowler MCP Server tools, grouped by namespace: Prowler Hub catalog, documentation search, and Prowler Cloud or App management.'
 ---

 Complete reference guide for all tools available in the Prowler MCP Server. Tools are organized by namespace.
@@ -1,5 +1,6 @@
 ---
-title: "Configuration"
+title: 'Configure the Prowler MCP Server for AI clients'
+description: 'Connect Claude Desktop, Cursor, and other MCP clients to Prowler MCP Server using HTTP or STDIO mode, and set up API key authentication for Prowler Cloud.'
 ---

 Configure your MCP client to connect to Prowler MCP Server.
@@ -1,5 +1,6 @@
 ---
-title: 'AWS Security Hub'
+title: 'Prowler vs AWS Security Hub'
+description: 'Compare Prowler with AWS Security Hub for cloud security posture management, multi-account scanning, compliance checks, and multi-cloud coverage beyond AWS.'
 ---

 AWS Security Hub remains a managed service designed for centralizing security alerts and compliance status within AWS environments. It integrates with various AWS security services and provides a consolidated view of security findings.
@@ -1,5 +1,6 @@
 ---
-title: 'GCP Cloud Security Command Center (Cloud SCC)'
+title: 'Prowler vs Google Cloud Security Command Center'
+description: 'Compare Prowler with GCP Cloud Security Command Center for asset visibility, threat detection, compliance monitoring, and cloud-agnostic security scanning.'
 ---

 Google Cloud Security Command Center (Cloud SCC) is a centralized security and risk management platform for Google Cloud Platform (GCP). It provides visibility into assets, vulnerabilities, and threats across GCP environments, helping organizations to manage and improve their security posture.
@@ -1,5 +1,6 @@
 ---
-title: 'Comparison'
+title: 'Prowler vs other cloud security platforms'
+description: 'Compare Prowler with AWS Security Hub, Microsoft Sentinel, Microsoft Defender for Cloud, and Google Cloud Security Command Center for cloud security posture.'
 ---

 Click to learn more about each cloud security provider and learn how Prowler is differentiated.
@@ -1,5 +1,6 @@
 ---
-title: 'Microsoft Defender for Cloud'
+title: 'Prowler vs Microsoft Defender for Cloud'
+description: 'Use Prowler open-source scans alongside Microsoft Defender for Cloud to validate Azure posture, customize checks, and extend coverage to AWS, GCP, and K8s.'
 ---

 **Use open-source scanning to validate and extend Microsoft Defender for Cloud**
@@ -1,5 +1,6 @@
 ---
-title: 'Microsoft Sentinel'
+title: 'Prowler vs Microsoft Sentinel'
+description: 'Compare Prowler with Microsoft Sentinel SIEM and SOAR for threat detection, log ingestion, compliance scanning, and multi-cloud security posture management.'
 ---

 Microsoft Sentinel is a scalable, cloud-native security information and event management (SIEM) and security orchestration automated response (SOAR) solution. It's designed to collect, detect, investigate, and respond to threats across the enterprise, primarily within the Azure cloud environment but also extending to on-premises and other cloud environments through various connectors.
@@ -1,4 +1,5 @@
 ---
-title: "Prowler API Reference"
+title: 'Prowler API reference'
+description: 'Open the interactive Prowler Cloud API v1 reference to explore endpoints for scans, findings, providers, compliance, and integrations with auth details.'
 url: "https://api.prowler.com/api/v1/docs"
 ---
@@ -1,4 +1,5 @@
 ---
-title: "Go to Cloud"
+title: 'Open Prowler Cloud'
+description: 'Jump to cloud.prowler.com to sign in or sign up for Prowler Cloud, the managed SaaS for cloud security scanning across AWS, Azure, GCP, Kubernetes, and M365.'
 url: "https://cloud.prowler.com"
 ---
@@ -1,4 +1,5 @@
 ---
-title: "Go to Hub"
+title: 'Open Prowler Hub'
+description: 'Jump to hub.prowler.com to browse the searchable public library of Prowler checks, cloud service artifacts, and compliance framework mappings with versioning.'
 url: "https://hub.prowler.com"
 ---
@@ -1,5 +1,6 @@
 ---
-title: "Prowler MCP"
+title: 'Prowler MCP Server on GitHub'
+description: 'Jump to the Prowler MCP Server source code on GitHub to review the Model Context Protocol implementation, tools, and integration examples for AI assistants.'
 url: "https://github.com/prowler-cloud/prowler/tree/master/mcp_server"
 tag: "new!"
 ---
@@ -1,5 +1,6 @@
 ---
-title: "Installation"
+title: 'Install the Prowler App'
+description: 'Install the self-hosted Prowler App with Docker Compose or from source to run the Prowler UI, API, and workers locally for multi-cloud security scans.'
 ---

 <Tip>
@@ -132,8 +133,8 @@ To update the environment file:
 Edit the `.env` file and change version values:

 ```env
-PROWLER_UI_VERSION="5.46.0"
-PROWLER_API_VERSION="5.46.0"
+PROWLER_UI_VERSION="5.47.0"
+PROWLER_API_VERSION="5.47.0"
 ```

 <Note>
@@ -1,5 +1,6 @@
 ---
-title: 'Installation'
+title: 'Install the Prowler CLI'
+description: 'Install the Prowler CLI on macOS, Linux, or Windows using pipx, pip, Docker, or the GitHub repository, then verify the version and run your first scan.'
 ---

 ## Installation
@@ -1,5 +1,6 @@
 ---
-title: "Installation"
+title: 'Install the Prowler MCP Server locally'
+description: 'Run the Prowler MCP Server locally using Docker, PyPI, or source with uv, or use the hosted mcp.prowler.com endpoint managed by Prowler for AI assistants.'
 ---

 There are **two ways** to use Prowler MCP Server:
@@ -1,6 +1,6 @@
 ---
 title: 'Prowler Product Families'
-description: 'Official names for Prowler Open Source projects and Prowler Products, including former product names.'
+description: "Reference for Prowler's product families, listing Prowler Cloud, Private Cloud, Hub, Lighthouse AI, MCP, CLI, Local Server, SDK, and their former names."
 boost: 2
 ---

@@ -1,5 +1,6 @@
 ---
-title: 'Overview'
+title: 'Prowler App overview'
+description: 'Learn how the self-hosted Prowler App combines the Prowler UI, API, SDK, and MCP Server to configure scans, view findings, and manage cloud security posture.'
 ---

 Prowler Local Server is a self-hosted web application that simplifies running Prowler. It is the open source counterpart of [Prowler Cloud](/getting-started/products/prowler-cloud), which runs the same application as a managed service. It provides:
@@ -1,5 +1,6 @@
 ---
-title: 'Overview'
+title: 'Prowler CLI overview'
+description: 'Discover the Prowler open-source CLI: run multi-cloud security scans, launch the dashboard, and audit against CIS, NIST, PCI DSS, ISO 27001, SOC 2, and more.'
 ---

 Prowler CLI is a command-line interface for running Prowler scans from the terminal.
@@ -1,5 +1,6 @@
 ---
-title: "AWS Marketplace"
+title: 'Subscribe to Prowler Cloud via AWS Marketplace'
+description: 'Subscribe to Prowler Cloud through the AWS Marketplace listing, set up your account, and manage billing for cloud security scanning directly from AWS Billing.'
 ---

 This page explains how to subscribe to **Prowler Cloud** through the **AWS Marketplace**, how to activate the subscription in Prowler Cloud, how billing works, and how to fix the errors you may hit on the way.
@@ -1,5 +1,6 @@
 ---
-title: 'Overview'
+title: 'Lighthouse AI on Prowler Cloud'
+description: 'Explore the enhanced Lighthouse AI on Prowler Cloud: persistent chat sessions, GPT-5.5 by default, an agentic chat view, and automatic provider validation.'
 ---

 import { SubscriptionBanner } from "/snippets/subscription-banner.mdx"
@@ -1,4 +1,5 @@
 ---
-title: "Pricing"
+title: 'Prowler Cloud pricing'
+description: 'Jump to prowler.com/pricing to compare Prowler Cloud plans, transparent per-resource pricing, free trial details, and enterprise support options for teams.'
 url: "https://prowler.com/pricing"
 ---
@@ -1,5 +1,6 @@
 ---
-title: "Overview"
+title: 'Prowler Cloud overview'
+description: 'Prowler Cloud is the managed SaaS on Prowler open source, with continuous monitoring, auto-scaling scan workers, Slack and Jira alerts, and SOC 2 controls.'
 ---

 [Prowler Cloud](https://prowler.com) makes Cloud Security easy and enables your team to build trust in their deployed services and applications.
@@ -1,6 +1,7 @@
 ---
 title: "Prowler for MSPs and MSSPs"
 sidebarTitle: "Overview"
+description: "Prowler for MSPs and MSSPs is a partner console to onboard customers, manage teams, and operate each customer's Prowler Cloud tenant on their behalf."
 ---

 Prowler for MSPs and MSSPs is a dedicated console for Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and consultants who run cloud security for other organizations. It lets a provider onboard customers, group them, manage a team, and operate each customer's Prowler Cloud tenant on their behalf.
@@ -1,5 +1,6 @@
 ---
-title: "Overview"
+title: 'Prowler Hub overview'
+description: 'Prowler Hub is a public library of versioned security checks, cloud service artifacts, and compliance framework mappings, with a documented API for automation.'
 ---

 **Prowler Hub** is our growing public library of versioned checks, cloud service artifacts, and compliance frameworks with its mappings. It’s searchable, explainable, and built to serve the community.
@@ -1,5 +1,6 @@
 ---
-title: 'Overview'
+title: 'Prowler Lighthouse AI overview'
+description: 'Prowler Lighthouse AI is an open-source cloud security analyst chatbot that helps teams query findings in natural language and get step-by-step remediation.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,5 +1,6 @@
 ---
-title: "Overview"
+title: 'Prowler MCP Server overview'
+description: 'The Prowler MCP Server exposes Prowler Cloud, Prowler App, Prowler Hub, and docs to Claude Desktop, Cursor, and other AI assistants over Model Context Protocol.'
 ---

 **Prowler MCP Server** brings the entire Prowler ecosystem to AI assistants through the Model Context Protocol (MCP). It enables seamless integration with AI tools like Claude Desktop, Cursor, and other MCP clients, allowing interaction with Prowler's security capabilities through natural language.
@@ -1,5 +1,6 @@
 ---
 title: 'Prowler SDK'
+description: 'Prowler SDK is the Python library that powers Prowler CLI and Local Server, implementing providers, services, and security checks for every Prowler product.'
 ---

 Prowler SDK is the Python library that powers Prowler CLI and Prowler Local Server. It implements the providers, services, and security checks that every Prowler product runs.
@@ -1,3 +1,8 @@
+---
+title: 'Prowler open-source cloud security platform overview'
+description: 'Prowler is an open-source cloud security platform that automates security checks, compliance frameworks, and remediation across AWS, Azure, GCP, and more.'
+---
+
 # What is Prowler?

 **Prowler** is the world’s most widely used open-source cloud security platform that **automates security and compliance** across any cloud environment. With thousands of ready-to-use security checks, remediation guidance, and compliance frameworks, Prowler delivers AI-driven, customizable, and easy-to-use monitoring and integrations, making cloud security simple, scalable, and cost-effective for organizations of any size.
@@ -1,5 +1,6 @@
 ---
-title: 'Data Regions & Availability'
+title: 'Prowler Cloud data regions and availability'
+description: 'Prowler Cloud AWS regions, EU Ireland hosting, high availability, disaster recovery, RPO, RTO, and status page for uptime and incidents.'
 ---

 Prowler Cloud runs on AWS with high availability built in.
@@ -1,5 +1,6 @@
 ---
-title: 'Encryption'
+title: 'Prowler Cloud data encryption at rest and in transit'
+description: 'How Prowler Cloud encrypts findings, backups, and API traffic with AES-256 at rest and TLS 1.2+ in transit across databases, storage, and services.'
 ---

 Prowler Cloud uses encryption everywhere possible. All data and communications are encrypted at rest and in transit.
@@ -1,5 +1,6 @@
 ---
-title: 'Security & Compliance'
+title: 'Prowler security and compliance overview'
+description: 'Prowler Cloud vs self-managed security posture: SOC 2 Type II, AWS FTR, encryption, backups, and the security tooling applied to every Prowler build.'
 ---

 **Prowler secures itself with Prowler.** As an open-source cloud security platform trusted by thousands of organizations, Prowler applies the same rigorous security standards internally that customers achieve externally.
@@ -1,5 +1,6 @@
 ---
-title: 'Networking'
+title: 'Prowler Cloud networking and egress IP allowlist'
+description: 'Prowler Cloud outbound egress IP addresses and DNS records to allowlist in firewalls and cloud security groups when scanning provider accounts.'
 ---

 ## Egress IP Addresses
@@ -1,5 +1,6 @@
 ---
-title: 'Software Security'
+title: 'Prowler software security: SAST, SCA, and CI/CD'
+description: 'Security controls applied to every Prowler build: SAST, SCA, container scanning, secrets detection, supply-chain pinning, and hardened GitHub Actions runners.'
 ---

 Prowler applies security-by-design across the development lifecycle. Every change passes automated checks at each stage: pre-commit hooks locally, multiple CI gates on pull requests, branch protection before merge, container scanning before publish, and registry monitoring after release.
@@ -1,6 +1,6 @@
 ---
 title: 'Support'
-description: 'Get help with Prowler'
+description: 'Get help with Prowler through the support desk, GitHub Discussions, the community Slack, office hours, and the Prowler Lighthouse AI security analyst chatbot.'
 ---

 import { SubscriptionBanner } from "/snippets/subscription-banner.mdx"
@@ -1,5 +1,6 @@
 ---
 title: 'Troubleshooting'
+description: 'Troubleshoot Prowler CLI, Prowler Local Server, and Docker Compose issues, including file descriptor limits, IAM role assumption, and empty scan reports.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,6 +1,7 @@
 ---
 title: "Connect Claude Code to Prowler MCP Server"
 sidebarTitle: "Claude Code"
+description: "Connect Claude Code CLI and the Claude desktop app Code tab to the Prowler Cloud MCP server, with the Prowler plugin or an MCP-only setup."
 ---

 Connect [Claude Code](https://www.claude.com/product/claude-code) to the Prowler Cloud MCP Server at `https://mcp.prowler.com/mcp`.
@@ -1,6 +1,7 @@
 ---
 title: "Connect the Claude App Chat to Prowler MCP Server"
 sidebarTitle: "Claude App (Chat)"
+description: "Connect the Claude desktop app Chat tab to the Prowler Cloud MCP server through a local mcp-remote bridge with your Prowler API key."
 ---

 Connect the **Chat** tab of the Claude desktop app to the Prowler Cloud MCP Server at `https://mcp.prowler.com/mcp`.
@@ -1,6 +1,7 @@
 ---
 title: "Connect Codex / ChatGPT Desktop to Prowler MCP Server"
 sidebarTitle: "Codex / ChatGPT"
+description: "Connect the OpenAI Codex CLI and ChatGPT desktop app to Prowler Cloud MCP server to query findings, inspect checks, and manage providers from Codex."
 ---

 Connect [OpenAI Codex](https://learn.chatgpt.com/docs/extend/mcp) to the Prowler Cloud MCP Server at `https://mcp.prowler.com/mcp` so Codex can query findings, inspect checks, and manage your Prowler providers.
@@ -1,6 +1,7 @@
 ---
 title: "Connect Cursor to Prowler MCP Server"
 sidebarTitle: "Cursor"
+description: "Connect Cursor's agent to the Prowler Cloud MCP server over HTTP so it can query findings, inspect security checks, and manage Prowler providers."
 ---

 Connect [Cursor](https://cursor.com/docs/mcp) to the Prowler Cloud MCP Server at `https://mcp.prowler.com/mcp` so the Cursor agent can query findings, inspect security checks, and manage your Prowler providers while you work.
@@ -1,7 +1,7 @@
 ---
 title: "Connect Your AI Agent to Prowler"
 sidebarTitle: "Overview"
-description: "Pick your AI agent and follow its guide to connect it to the Prowler Cloud MCP Server."
+description: "Pick your AI agent — Claude Code, Claude Chat, Codex, Cursor, or VS Code Copilot — and follow its guide to connect it to the Prowler Cloud MCP server."
 ---

 Connect your AI agent to the Prowler Cloud MCP Server at `https://mcp.prowler.com/mcp` so it can query findings, inspect security checks, and manage your Prowler providers.
@@ -1,6 +1,7 @@
 ---
 title: "Connect VS Code and GitHub Copilot to Prowler MCP Server"
 sidebarTitle: "VS Code / Copilot"
+description: "Connect VS Code 1.102+ and GitHub Copilot agent mode to the Prowler Cloud MCP server so Copilot can query findings and manage Prowler providers."
 ---

 Connect [Visual Studio Code](https://code.visualstudio.com/docs/agents/reference/mcp-configuration) and GitHub Copilot agent mode to the Prowler Cloud MCP Server at `https://mcp.prowler.com/mcp` so Copilot can query findings, inspect security checks, and manage your Prowler providers.
@@ -1,5 +1,6 @@
 ---
-title: "Check Aliases"
+title: "Define check aliases in Prowler CLI"
+description: "Add CheckAliases to a check's metadata to run a Prowler check by an alternate name from the CLI without editing the underlying check ID."
 ---

 Prowler allows you to use aliases for the checks. You only have to add the `CheckAliases` key to the check's metadata with a list of the aliases:
@@ -1,5 +1,6 @@
 ---
-title: "Configuration File"
+title: "Prowler CLI configuration file (config.yaml)"
+description: "Customize Prowler CLI check thresholds and provider-specific tunables through config.yaml or a custom --config-file across AWS, Azure, GCP, and Kubernetes."
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,5 +1,6 @@
 ---
-title: "Custom Checks Metadata"
+title: "Override check metadata with custom severity and risk"
+description: "Use --custom-checks-metadata-file in Prowler CLI to override default check severity, titles, risk, and remediation details with a custom YAML file."
 ---

 In certain organizations, the severity of specific checks might differ from the default values defined in the check's metadata. For instance, while `s3_bucket_level_public_access_block` could be deemed `critical` for some organizations, others might assign a different severity level to it.
@@ -1,5 +1,6 @@
 ---
-title: "Prowler Local Dashboard"
+title: "Run the Prowler local dashboard from CSV outputs"
+description: "Launch the built-in Prowler dashboard to visualize CSV scan output locally or in Docker, exposing an interactive UI on port 11666 for review."
 ---

 Prowler Local Dashboard is a local web dashboard built from the CSV outputs produced by Prowler CLI. Launch it with:
@@ -1,5 +1,6 @@
 ---
-title: 'Prowler Fixers (Remediations)'
+title: 'Prowler fixers: automated remediations for failed findings'
+description: 'Use the Prowler CLI --fixer flag to remediate failed findings automatically and list available fixes per provider with --list-fixers or --list-remediations.'
 ---

 Prowler allows you to fix some of the failed findings it identifies. You can use the `--fixer` flag to run the fixes that are available for the checks that failed.
@@ -1,5 +1,6 @@
 ---
-title: 'Integrations'
+title: 'Prowler CLI Slack integration for scan summaries'
+description: 'Send Prowler CLI scan summaries to a Slack channel using --slack, a Slack App OAuth token, and the SLACK_API_TOKEN and SLACK_CHANNEL_NAME variables.'
 ---

 ## Integration with Slack
@@ -1,5 +1,6 @@
 ---
-title: 'Logging'
+title: 'Prowler CLI logging levels and log file output'
+description: 'Configure Prowler CLI log levels with --log-level and route DEBUG, INFO, WARNING, ERROR, or CRITICAL messages to a file with --log-file for troubleshooting.'
 ---

 Prowler has a logging feature to be as transparent as possible, so that you can see every action that is being performed whilst the tool is being executed.
@@ -1,5 +1,6 @@
 ---
-title: 'Miscellaneous'
+title: 'Miscellaneous Prowler CLI flags and execution options'
+description: 'Show Prowler version, enable verbose mode, tune execution behavior, and use miscellaneous Prowler CLI options that fine-tune everyday scan runs.'
 ---

 ## Prowler Version
@@ -1,5 +1,6 @@
 ---
-title: 'Mutelisting'
+title: 'Mutelist Prowler findings for accepted risks'
+description: 'Suppress intentional Prowler findings using a mutelist YAML with account, check, region, resource, and tag rules to keep expected exceptions out of reports.'
 ---

 **Muting Findings for Intentional Configurations**
@@ -1,5 +1,6 @@
 ---
-title: 'Parallel Execution'
+title: 'Run Prowler in parallel across AWS services'
+description: 'Speed up scans of large AWS accounts by executing Prowler in parallel per service on Linux and Windows while respecting API rate limits and retries.'
 ---

 The strategy used here will be to execute Prowler once per service. You can modify this approach as per your requirements.
@@ -1,5 +1,6 @@
 ---
-title: 'Pentesting'
+title: 'Pentesting checks in Prowler: secrets and exposure'
+description: 'Run Prowler pentesting checks for exposed secrets, internet-facing resources, weak authentication, and authorization gaps across AWS, Azure, and GCP.'
 ---

 Prowler has some checks that analyse pentesting risks (Secrets, Internet Exposed, AuthN, AuthZ, and more).
@@ -1,5 +1,6 @@
 ---
-title: 'Quick Inventory'
+title: 'Prowler quick inventory for AWS resource counts'
+description: 'Use prowler aws -i / --quick-inventory to list AWS resources per service and region, exporting a CSV and JSON summary of your cloud footprint.'
 ---

 Prowler allows you to execute a quick inventory to extract the number of resources in your provider.
@@ -1,5 +1,6 @@
 ---
-title: 'Reporting in Prowler'
+title: 'Prowler CLI reporting: CSV, JSON-OCSF, ASFF, and HTML'
+description: 'Generate Prowler scan reports in CSV, JSON-OCSF, JSON-ASFF (Security Hub), and HTML formats with -M/--output-formats and custom output directories.'
 ---

 Prowler generates security assessment reports in multiple formats, ensuring compatibility with various analysis tools and AWS integrations.
@@ -1,5 +1,6 @@
 ---
-title: 'Scanning Unused Services'
+title: 'Scan unused AWS services with Prowler'
+description: 'Enable --scan-unused-services in Prowler to audit AWS resources that are provisioned but idle, such as unused ACM certificates and dormant services.'
 ---

 <Note>
@@ -1,7 +1,6 @@
 ---
-title: 'Compliance'
-sidebarTitle: 'Overview'
-description: 'Run security checks against compliance frameworks, review posture across providers, use Compliance Watchlist to pin frameworks, and download CSV or PDF reports from Prowler Cloud, or CSV reports from Prowler CLI.'
+title: 'Prowler compliance frameworks and reports'
+description: 'Run Prowler compliance scans against CIS, NIST, ISO 27001, PCI-DSS, SOC 2, and more, then download CSV or PDF reports from Prowler Cloud, App, or CLI.'
 ---

 import { SubscriptionBanner } from "/snippets/subscription-banner.mdx"
@@ -1,7 +1,7 @@
 ---
 title: 'Cross-Provider Compliance'
 sidebarTitle: 'Cross-Provider Compliance'
-description: 'Aggregate a single-provider compliance framework across every provider of the same type, review the consolidated roll-up and per-provider coverage, and download a combined PDF report.'
+description: 'Aggregate a single-provider compliance framework across every provider of the same type in Prowler Cloud, and export a consolidated PDF report.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -1,7 +1,7 @@
 ---
 title: 'Cross-Provider Type Compliance'
 sidebarTitle: 'Cross-Provider Type Compliance'
-description: 'Aggregate a universal compliance framework across every compatible provider with a completed scan, review the consolidated roll-up and per-provider breakdown, and download a combined PDF report.'
+description: 'Aggregate a universal compliance framework across every compatible provider with a completed scan in Prowler Cloud, and export a combined PDF report.'
 ---

 import { VersionBadge } from "/snippets/version-badge.mdx"
Author	SHA1	Message	Date
mintlify[bot]	30718f4882	Merge master	2026-11-02 07:09:02 +00:00
Pedro Martín	67aa941012	fix(mongodbatlas): keep Atlas error detail on identity (#13214 )	2026-10-30 13:03:15 +01:00
Pedro Martín	f64e5e10ad	fix(container): bump Python base image to 3.12.16 (#13215 )	2026-10-30 12:37:56 +01:00
Alejandro BailoandClaude Opus 5.5	008864797b	feat(ui): do everything about an issue from its side panel (#13207 ) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-30 10:03:31 +01:00
Prowler Botandprowler-bot	6999bbac9b	chore(release): Bump versions to v5.48.0 (#13203 ) Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>	2026-10-29 16:37:40 +01:00
Pedro Martín	2cc5c4b2f9	chore(changelog): v5.47.0 highlights (#13200 )	2026-10-29 16:37:20 +01:00
mintlify[bot]	1387a5e91e	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-10-26 07:08:18 +00:00
mintlify[bot]	cfca235d12	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-10-19 07:08:30 +00:00
mintlify[bot]	f7660cf1b4	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-10-12 07:07:23 +00:00
mintlify[bot]	ebf9b4b561	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-10-05 07:07:37 +00:00
mintlify[bot]	30ad5249d3	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-09-28 07:08:35 +00:00
mintlify[bot]	c453b7293e	Merge master	2026-09-21 07:11:40 +00:00
mintlify[bot]	2d4ab4cc25	docs: add SEO descriptions for cross-provider organizations and Azure management groups	2026-08-31 07:09:03 +00:00
mintlify-bot	6519927d64	Merge master	2026-08-31 07:08:03 +00:00
mintlify[bot]	234c272da0	docs: apply SEO best practices to new pages and fix short descriptions	2026-08-17 07:10:54 +00:00
mintlify[bot]	270490e93e	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-08-17 07:06:58 +00:00
mintlify[bot]	ea9171c77c	docs: fix SEO metadata on changelog, Codex, and cross-provider compliance pages	2026-08-10 07:47:34 +00:00
mintlify-bot	aecac60c12	Merge master	2026-08-10 07:45:51 +00:00
mintlify[bot]	abc5bedc45	docs: add SEO title and description to introduction page	2026-07-08 12:34:31 +00:00
mintlify[bot]	fa6eb9d5d9	Merge remote-tracking branch 'origin/master' into mintlify/cb114598	2026-07-08 12:32:39 +00:00
mintlify[bot]	9c5ed27a7a	docs: apply SEO and metadata best practices to changed pages	2026-07-08 12:31:58 +00:00
				`@@ -0,0 +1 @@`
				`Python base image from 3.12.15 to 3.12.16 in the API container image, patching CVE-2026-115557`