prowler icon indicating copy to clipboard operation
prowler copied to clipboard

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness....

Results 454 prowler issues
Sort by recently updated
recently updated
newest added

### New feature motivation We would like to use Prowler for AWS compliance but Prowler doesn't include all of the relevant frameworks, specifically CIS AWS Compute Services Benchmark v1.0.0. ###...

feature-request
help wanted
new check idea
severity/low
provider/aws

The --python option enable prowler to be called by a python program to manipulate findings directly ### Context Hello, It would be nice to be able to use prowler from...

evaluating
severity/informational
no-merge

### Description This PR updates the regions for AWS services. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the Apache...

status/waiting-for-revision
severity/low
provider/aws
backport-v3

### Steps to Reproduce prowler aws -s iam -M csv ### Expected behavior After execution, it says: ``` Detailed results are in: - CSV: /shared/prepo/prowler/output/prowler-output-XXXXXX-20240430165309.csv ``` But that csv only...

bug
status/needs-triage

### Steps to Reproduce 1. prowler azure --tenant-id --browser-auth --compliance cis_2.1_azure ### Expected behavior I expect all the checks from the CIS Azure V2.1.0 to be included in the CSV/XLSX...

bug
status/needs-triage

### Steps to Reproduce 1. command: prowler kubernetes --context --namespace 2. Cloud provider: GCP/GKE 3. Environment: Single project in GCP 4. Error: [File: kubernetes_provider.py:151] [Module: kubernetes_provider] CRITICAL: ConfigException[141]: Service host/port...

bug
status/awaiting-reponse
severity/low
provider/kubernetes

### Description Handle non-existing Private IPs in Instances to solve `[KeyError[258]: 'PrivateIpAddress']` ### License By submitting this pull request, I confirm that my contribution is made under the terms of...

provider/aws

### New feature motivation All checks related to secret detection lead to a massive amount of false positives. This could get prevented if there would be a possibility to configure...

feature-request
status/needs-triage
provider/aws

### Description New checks related with cognito service for aws are added: - [x] cognito_user_pool_temporary_password_expiration -> Cognito user pools temporary passwords set by administrators expire in 7 days or less...

provider/aws

### Description Improve default AWS mutelist with more ControlTower resources. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the Apache...

documentation
provider/aws