Changelog - Prowler Documentation

July 24, 2026

🎫 Finding Groups - Jira

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Selected Findings, Finding Groups, and mixed selections can now be sent to Jira. When you select multiple findings, choose between one grouped issue or separate issues. Generated issues keep their Prowler context with deep links and filter details, while the UI provides clear dispatch and failure feedback.

Read more in the Jira integration documentation.

🕸️ Attack Paths - Queries

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Prowler Cloud now records which built-in Attack Paths queries returned data at the end of each scan. The query selector hides confirmed-empty queries for the selected scan, so you can focus on paths that exist without opening blank graph views. Errored, unknown, and parameterized queries remain available when they still require investigation or input.All Attack Paths queries are now published on Prowler Hub, where you can browse the full catalog.

Read more in the Attack Paths documentation.

🧑‍🏫 New Tutorials: Connect Your AI Agents to Prowler Cloud

This feature needs a Prowler Cloud API key, so it is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

New tutorials walk you through connecting your own AI agents to Prowler Cloud, so they can query your security posture and act on it programmatically.Read more in the AI agents documentation.

☁️ Region-less Oracle Cloud Infrastructure Setup

Oracle Cloud Infrastructure (OCI) provider credentials no longer require a region. Existing clients can still send the legacy region field for compatibility, but the API ignores it before storing credentials or starting a scan. This removes an unnecessary step from OCI onboarding.Read more in the OCI documentation.

🔍 Checks

AWS

sagemaker_notebook_instance_no_secrets scans the OnCreate and OnStart lifecycle scripts of SageMaker notebook instances for hardcoded API keys, passwords, tokens, connection strings, and other secrets. Thanks to @kiranrajsg!

Read more in the AWS documentation. Explore all AWS checks at Prowler Hub.

🔐 Security

Integration responses and operations now respect provider visibility, preventing hidden-provider disclosure and blocking unauthorized attachment, connection checks, Jira dispatches, edits, and deletion.
Next.js was updated from 16.2.9 to 16.2.11, patching four high-severity and five medium-severity vulnerabilities.
The unused npm CLI was removed from the UI container image, eliminating the bundled node-tar CVE-2026-59873 and reducing exposure to future bundled npm vulnerabilities.
Vitest and its browser packages were updated from 4.1.8 to 4.1.10, resolving the critical @vitest/browser file-access permission bypass. These are development dependencies and have no runtime impact.
Kubernetes kubeconfig validation now blocks legacy auth-provider.config.cmd-path command authentication, closing a command-execution bypass.
next-auth was updated from 5.0.0-beta.30 to 5.0.0-beta.32, patching two critical Auth.js advisories: existence-based authorization checks that could fail open when a provider is misconfigured, and a homoglyph @ bypass in email address normalization. The bump also pulls in the patched @auth/core 0.41.3 transitively.

🙌 External Contributors

Thank you to our community contributors for this release!

@kiranrajsg: AWS sagemaker_notebook_instance_no_secrets check (#11843)
@owenchenxy: Alibaba Cloud SSH and RDP security group checks now handle capitalized Policy="Accept" values correctly (#12049)
@rsaladra: S3 bucket name validation no longer raises an invalid escape sequence SyntaxWarning at startup (#12041)
@SujayKulkarni-2211: Updated the AWS check count in the README (#12011)

See the full release notes on GitHub for the complete list of changes.

July 17, 2026

💬 Lighthouse AI - Side Chat

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Lighthouse AI now lives in a side panel you can open from anywhere in the app. Ask about the findings you are looking at without leaving the page, and expand to the full-page chat at any time: your draft, messages, and streaming response come along. Finding and resource details share the same panel, with tabs to switch between Details and Lighthouse AI.

Read more in the Lighthouse AI documentation.

🤖 Lighthouse AI - Take Action

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Lighthouse AI is no longer read-only. Ask it to do things and it will: connect or remove providers, trigger a scan, schedule daily scans, update scan settings, and manage your mutelist and mute rules, straight from the chat. Every action is gated by RBAC: Lighthouse can only do what the user asking could do themselves.Read more in the Lighthouse AI capabilities.

☁️ One-step AWS Organizations onboarding

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Onboarding an entire AWS Organization is now a single step. One CloudFormation quick-create link deploys the management account role and a service-managed StackSet that rolls the role out to every member account, replacing the manual StackSet console setup. Target the whole organization or a specific Organizational Unit or Root ID, and deploy from the management account or a delegated administrator. The S3 integration quick-create link also pre-fills the bucket owner account ID, preventing a stack validation error.

Built on the full-organization CloudFormation template contributed by @jchrisfarris — thanks!Read more in the AWS Organizations documentation.

🎯 Scan configurations: exclude checks and services

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Scan configurations now accept excluded_checks and excluded_services to narrow the execution scope. Skip individual checks or entire services per provider, and the scan does not run them at all: less noise, faster scans, and no findings you would mute anyway.Read more in the Scan Configuration documentation.The sidebar was redesigned around how you actually work: grouped sections for security, settings, and help, a Home/Chat switch at the top, collapsible configuration entries, clearer active states, and a responsive mobile overlay.

🔌 Prowler MCP tools renamed to `prowler_*`

Core Prowler tools in Prowler MCP moved from the prowler_app_* prefix to the shorter prowler_* namespace, and the MCP documentation was restructured around it. Legacy prowler_app_* names keep working in Lighthouse AI, so existing setups are not broken.Read more in the Prowler MCP tools reference.

🔐 Security

Jira integration credentials now only accept bare Atlassian site names (letters, numbers, and hyphens), and Jira tenant information requests validate site names and no longer follow redirects.
Social account linking now requires a verified matching email from both the identity provider and the existing user account, and account connection notification emails are disabled.
13 advisories reported by pnpm audit on the UI (3 high, 9 moderate, 1 low) are resolved with patched versions of hono, ws, vite, dompurify, js-yaml, @opentelemetry/core, and @babel/core, including hono CVE-2026-59896.

🙌 External Contributors

No external contributors in this release.Special mention to @jchrisfarris, whose full-organization CloudFormation template from v5.34.0 powers the new one-step AWS Organizations onboarding (#10403).See the full release notes on GitHub for the complete list of changes.

July 15, 2026

🏷️ New product names

The Prowler family has grown, and the names now say what each product is. Same products, clearer names:Prowler products:

Prowler Cloud — the managed cloud security platform operated by the Prowler team.
Prowler Private Cloud (formerly Prowler Enterprise) — the self-hosted deployment of Prowler Cloud in your own environment.
Prowler Hub — the free public library of versioned checks, cloud service artifacts, and compliance frameworks.
Prowler Lighthouse AI — The Agentic Cloud Defender in Prowler Cloud and Prowler Private Cloud.
Prowler MCP — the MCP server that connects AI assistants and agents to Prowler, including the IDE plugins.

Open source projects:

Prowler CLI — the command-line scanner for all supported providers.
Prowler Local Server (formerly Prowler App) — the self-hosted web application and API to run scans, visualize findings, and manage providers.
Prowler Local Dashboard — the web dashboard for visualizing Prowler CLI scan results, distributed with the CLI.
Prowler SDK — the Python library behind Prowler CLI and Prowler Local Server.

See the full family in the Prowler products documentation.

🧭 Cross-Provider Compliance

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

One framework, every cloud, a single answer. The new Cross-provider tab in Compliance takes the most recent completed scan of every compatible provider and rolls them up into a single compliance posture per framework, with a per-provider breakdown and a combined executive PDF report. Requirement status follows strict precedence (FAIL over PASS over MANUAL), so one failing provider is enough to flag a requirement across your whole estate.

Three universal frameworks support it today:

CIS Controls 8.1 — AWS, Azure, Google Cloud, Microsoft 365, Kubernetes, GitHub, Google Workspace, Okta, Oracle Cloud, Alibaba Cloud, Cloudflare, MongoDB Atlas, OpenStack, and Vercel.
CSA CCM 4.0 — AWS, Azure, Google Cloud, Alibaba Cloud, and Oracle Cloud.
DORA 2022/2554 — AWS, Azure, Google Cloud, Alibaba Cloud, and Cloudflare.

Filter by provider type, account, or provider group, drill into each framework’s requirements, and export the combined PDF.

Read more in the Cross-Provider Compliance documentation.

🏢 New Provider — E2E Networks

Prowler now scans E2E Networks, with 27 checks spanning compute nodes, networking, security groups, load balancers, block and file storage, and managed databases. Thanks to @deepak7093 for their 1st provider in Prowler!Available in the Prowler CLI:

export E2E_NETWORKS_API_KEY="your-api-key"
export E2E_NETWORKS_AUTH_TOKEN="your-auth-token"
export E2E_NETWORKS_PROJECT_ID="your-project-id"
prowler e2enetworks

Read more in the E2E Networks documentation. Explore all E2E Networks checks at Prowler Hub.

🔐 Security

User role relationship updates in the API are now limited to the active tenant, preserving the role assignments the same user holds in other tenants.

🔍 Checks

AWS

ec2_ami_account_block_public_access — verifies AMI block public access is enabled at the account level in each Region, so AMIs cannot be shared publicly. Thanks to @goutham-hari!
datapipeline_pipeline_no_secrets_in_definition — scans Data Pipeline object fields, parameter objects, and parameter values for hardcoded secrets with Kingfisher. Thanks to @YinkaMetrics!
elbv2_listener_pqc_tls_enabled — verifies ELBv2 HTTPS/TLS listeners use post-quantum TLS security policies with TLS 1.2 or higher, helping reduce harvest-now-decrypt-later exposure.
amplify_app_no_secrets_in_environment — scans Amplify app and branch environment variables and build settings (buildSpec) for hardcoded secrets with Kingfisher. Thanks to @Deep070203!

Azure

app_function_ensure_http_is_redirected_to_https — verifies that Function Apps enforce HTTPS-only traffic. Thanks to @amandalal007!

Kubernetes

core_minimize_hostpath_volume_mounts — detects Pods that use hostPath volumes. Thanks to @0xTaoZ!
core_readonly_root_filesystem_enabled — verifies that every container in each Pod explicitly sets readOnlyRootFilesystem: true in its security context. Thanks to @Weedle02!

STACKIT

iaas_server_public_ip_attached — flags IaaS servers that have a public IP address directly attached to a network interface. Thanks to @johannes-engler-mw!

Explore all checks at Prowler Hub.

🙌 External Contributors

Thank you to our community contributors for this release!

@jchrisfarris — Deploy AWS Organizations with the CloudFormation template in one step (#10403)
@deepak7093 — New E2E Networks provider: 27 checks across compute nodes, networking, security groups, load balancers, block/file storage, and managed databases (#11654)
@goutham-hari — AWS ec2_ami_account_block_public_access check (#11828)
@YinkaMetrics — AWS datapipeline_pipeline_no_secrets_in_definition check (#11821)
@amandalal007 — Azure app_function_ensure_http_is_redirected_to_https check (#11929)
@0xTaoZ — Kubernetes core_minimize_hostpath_volume_mounts check (#11837)
@Weedle02 — Kubernetes core_readonly_root_filesystem_enabled check (#11835)
@johannes-engler-mw — STACKIT iaas_server_public_ip_attached check (#11549)
@janderik — Trailing newlines added to compliance, region, and fixture data files for POSIX compliance (#11765)
@Deep070203 — AWS amplify_app_no_secrets_in_environment check (#11825)

See the full release notes on GitHub for the complete list of changes.

July 7, 2026

🤖 Lighthouse AI — The Agentic Cloud Defender

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Lighthouse AI is now a full agentic assistant wired to the Prowler Cloud backend. Ask it about your findings, your compliance posture, or your riskiest resources, and watch it work: the agent discovers and runs the Prowler tools it needs to answer, with every tool call visible in the new agentic view. It reads your security data through read-only tools, so it can never touch secrets or modify your tenant.

The chat experience is rebuilt around persistent sessions: conversations stream in real time, stay in your session history, can be archived, and a sidebar chat mode lets you ask questions from any page in the app without losing your place.

You control the brain behind it. Configure one or more LLM providers — OpenAI, Amazon Bedrock, or any OpenAI-compatible endpoint (OpenRouter, Ollama) — with connection testing built into the setup and per-provider model selection. Add a shared business context (your security goals, compliance needs, organizational priorities) and every session uses it to give answers that fit your environment.

Read more in the Lighthouse AI documentation and the multiple LLM providers guide.

📄 Compliance PDF Reports Without Credentials

Compliance PDF reports no longer require the provider’s credentials to be present. Findings are now enriched from the provider metadata stored in the database, so a report still generates even after the provider secret has been deleted or its credentials have become invalid.Read more in the compliance documentation.

⏳ Scan Queueing

Overlapping scans for the same provider now queue behind the active one instead of dispatching concurrent scan workers. Launch a manual scan while a scheduled one is running and it waits its turn. No more duplicated work or racing scans.

🔐 Security

The Kubernetes provider credentials now reject kubeconfigs using exec authentication in Prowler Cloud, at the API and in the credential form, preventing user-supplied commands from running on Cloud workers.Read more in the Kubernetes provider authentication documentation.

🙌 External Contributors

Thank you to our community contributors for this release!

@kratos0718 — Azure postgresql_flexible_server_log_retention_days_greater_3 Flexible Server log retention fix (#11761)
@Sanjays2402 — KeyError: 'MANUAL' crash fix in the compliance summary table, shipped early in v5.32.1 (#11823)

See the full release notes on GitHub for the complete list of changes.

July 2, 2026

🔎 Findings Triage

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Triage findings straight from the Findings view. Each finding gets a triage status you can move through its lifecycle:Open → Under Review → Remediating → Risk Accepted → False Positive → ResolvedAdd a triage note to record the decision, mute a finding, all from the row’s actions menu. The current status shows inline on every finding row, so you keep track of what has been reviewed and stop re-checking the same issues scan after scan.

The status also follows the finding automatically across scans: when a finding flips from FAIL to PASS on the next scan it moves to Resolved, and when it flips from PASS back to FAIL it moves to Reopened. You always know whether an issue is genuinely fixed or has regressed, without touching it by hand.

Read more in the Findings Triage documentation.

⚙️ Scan Configuration

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Create named, reusable scan configurations from a dedicated Scans / Configuration page. Each configuration is YAML that follows the structure of prowler/config/config.yaml, so you only include the keys you want to override; the rest fall back to the built-in defaults. Values are validated on save against a per-provider, type-safe configuration schema that range-checks each field and rejects unknown keys, so a malformed config is caught before it ever reaches a scan. Attach a configuration to one or more providers so it applies on their next scan, or save it now and attach providers later.

From the Providers view you can pick which configuration a provider uses (Default or any of your saved ones) without leaving the page. No more passing config files around by hand.

Read more in the Scan Configuration documentation.

✅ Per-Requirement Configuration Validation

This feature is available exclusively in Prowler Cloud and Prowler Private Cloud with a subscription.

Compliance frameworks can now declare ConfigRequirements on a requirement, so it’s reported as FAIL when its mapped checks ran under a configuration too loose to satisfy it. Even if every individual finding PASSed. This applies across all compliance outputs: CSV, OCSF, and console tables, and is the engine behind Scan Configuration’s “marked as FAIL” behavior described above.

Per-requirement configuration validation

Read more in the Configuration File documentation.

⏱️ Okta — Request Throttling & Retries

Prowler now proactively throttles Okta API requests to stay under rate limits, with reactive retries on HTTP 429 as a safety net. Both are set in the scan configuration (or their equivalent CLI flags):

okta_requests_per_second (config file) / --okta-requests-per-second (CLI) — cap the request rate. Default: 4 req/s.
okta_max_retries (config file) / --okta-retries-max-attempts (CLI) — bound retry attempts. Default: 5.

This makes large Okta scans more reliable and less likely to be rate-limited.Read more in the Okta rate limit documentation.

📉 AWS — Cap Resources Scanned per Service

Large AWS accounts can now cap how many resources Prowler analyzes for the highest-volume services, keeping scan time and cost under control. Set a global limit with max_scanned_resources_per_service, or override it per service:

EBS snapshots (max_ebs_snapshots)
Backup recovery points (max_backup_recovery_points)
CloudWatch log groups (max_cloudwatch_log_groups)
Lambda functions (max_lambda_functions)
ECS task definitions (max_ecs_task_definitions)
CodeArtifact packages (max_codeartifact_packages)

Limits are disabled by default (0 = unlimited); only positive values cap the analyzed resources.

When a positive limit is set, compliance results reflect only the sampled resources, not every matching resource in the account.

Read more in the configuration file documentation.

🏷️ Azure — Filter by Resource Group

Azure scans can now be scoped to one or more resource groups with the new --azure-resource-group / --azure-resource-groups option. This lets you run focused assessments against specific environments, teams, or workloads instead of scanning every accessible resource in the subscription. Thanks to @Legin-ML for contributing this feature!

# Single resource group
prowler azure --az-cli-auth --azure-resource-group rg-prod

# Multiple resource groups
prowler azure --az-cli-auth --azure-resource-group rg-prod1 rg-prod2

Read more in the Azure Resource Groups documentation.

🧭 Provider Group Filter

Filter the Overview, Findings, Resources, Scans, and Providers views by provider group. Scope the whole app to a team, an environment, or a business unit in one click instead of filtering provider by provider.

Read more about managing provider groups in the RBAC documentation.

🔬 API — Timestamp Precision in Findings Filters

The /api/v1/findings endpoint now accepts full timestamps on the inserted_at and updated_at filters (filter[inserted_at__gte], filter[inserted_at__lte], and the updated_at variants), so you can query narrow time windows instead of whole days. Date-only filtering keeps working, so existing integrations are unaffected.

# Findings inserted within a precise timestamp window
curl --globoff \
  'http://localhost:8080/api/v1/findings?filter[inserted_at__gte]=2026-07-01T06:12:18Z&filter[inserted_at__lte]=2026-07-02T19:25:55Z' \
  -H 'Authorization: Bearer <YOUR_TOKEN>' \
  -H 'Accept: application/vnd.api+json'

🕸️ Attack Paths — Neptune as a persistent sink

Attack Paths can now persist its graph in AWS Neptune in addition to Neo4j, selectable via ATTACK_PATHS_SINK_DATABASE=neptune (default neo4j). Cartography’s per-scan ingest database stays on Neo4j. The scan task preflights the ingest database and the configured sink before ingestion, and provider graph cleanup now deletes relationships in directed batches before deleting nodes.This is the groundwork for scale: a managed graph database lets Attack Paths hold much larger graphs, extend coverage to more providers, and link resources across them so an attack path can cross provider boundaries instead of stopping at one cloud’s edge.Read more in the Attack Paths documentation.

🔐 New Secret-Scanning Engine — Kingfisher

Prowler’s secret-scanning checks now run on Kingfisher instead of detect-secrets. Scans run fully offline by default, and obvious placeholder values (e.g. password123, changeme) are no longer reported, cutting down false positives.Opt in to live validation with the new --scan-secrets-validate flag (or the aws.secrets_validate config option): Prowler checks discovered secrets against the provider APIs, and any secret confirmed to be live is reported as critical, so you can prioritize the credentials that actually work.

The detect_secrets_plugins configuration option has been removed, as it is no longer used by the new engine.

Read more in the secret detection documentation.

🔍 Checks

AWS

stepfunctions_statemachine_encrypted_with_cmk — Step Functions state machines use a customer-managed KMS key for encryption at rest instead of the default AWS-owned key. Thanks to @Sid-0602!
waf_regional_webacl_logging_enabled — AWS WAF Classic Regional Web ACLs have logging enabled to a Kinesis Data Firehose stream. Thanks to @Sid-0602!
IAM privilege escalation — the privesc checks now cover AWS Bedrock AgentCore paths across Runtime, Harness, Code Interpreter, and Custom Browser. Thanks to @MrCloudSec!
apigateway_restapi_no_secrets_in_stage_variables — scans API Gateway REST API stage variables for hardcoded passwords, API keys, and tokens. Thanks to @chirag1206!
awslambda_function_no_secrets_in_code — this check now supports a secrets_ignore_files audit-config option to skip files inside the deployment package by glob pattern (e.g. *.deps.json), suppressing .NET dependency-manifest false positives without masking real secrets.
s3_bucket_object_public — spot-checks a configurable sample of object ACLs in each bucket and flags objects granted to the AllUsers or AuthenticatedUsers groups. Disabled by default; opt in via the s3_bucket_object_public_enabled configuration option. Thanks to @Synchx00!

Microsoft 365

New Conditional Access hardening checks:

entra_conditional_access_policy_explicitly_targets_azure_devops — at least one enabled policy explicitly includes the Azure DevOps cloud application, rather than relying on a broad “All cloud apps” policy. Thanks to @mzl2233!
entra_conditional_access_policy_no_exclusion_gaps — every user, group, role, or application excluded from an enabled policy stays in scope of another enabled policy. Thanks to @UTKARSH698 with @arieleli01212 as co-author!
entra_conditional_access_policy_groups_management_restricted — every security group referenced by an enabled or report-only policy is management-restricted or role-assignable. Thanks to @SAMurai-16!
exchange_application_access_policy_restricts_mailbox_apps — every service principal with Microsoft Graph application-level Exchange mailbox permissions is restricted by an Exchange Online Application Access Policy. Thanks to @VasistAcharya!

📚 Compliance

CIS Benchmark Refresh — Six New Versions

Prowler ships a coordinated refresh of the CIS Benchmarks across six providers:

AWS — CIS Amazon Web Services Foundations Benchmark v7.0.0, adding the new Organizations section (2.1.1-2.1.6), resource policy (2.21), web front-end access logging (4.10), and VPC Endpoints (6.8) recommendations.
Azure — CIS Microsoft Azure Foundations Benchmark v6.0.0.
GCP — CIS Google Cloud Platform Foundation Benchmark v5.0.0.
Kubernetes — CIS Kubernetes Benchmark v2.0.1.
GitHub — CIS GitHub Benchmark v1.2.0.
Microsoft 365 — CIS Microsoft 365 Foundations Benchmark v7.0.0.

CIS Controls v8.1 — Universal Framework

A new universal (cross-provider) compliance framework mapping existing checks across 18 providers — AWS, Azure, GCP, Kubernetes, M365, GitHub, AlibabaCloud, OracleCloud, GoogleWorkspace, Okta, Cloudflare, Vercel, MongoDB Atlas, OpenStack, Linode, StackIT, NHN, and Scaleway — to the 18 CIS Critical Security Controls and their Safeguards. Ships with a dedicated detail view and report mapping in the UI.Read more in the compliance documentation. Explore the full compliance catalog at Prowler Hub.

🙌 External Contributors

Thank you to our community contributors for this release!

@chirag1206 — apigateway_restapi_no_secrets_in_stage_variables check (#11188)
@MrCloudSec — AWS Bedrock AgentCore privilege escalation paths in the IAM privesc checks (#11726)
@Sid-0602 — stepfunctions_statemachine_encrypted_with_cmk (#11538) and waf_regional_webacl_logging_enabled (#11539) checks
@mzl2233 — entra_conditional_access_policy_explicitly_targets_azure_devops check (#11182)
@UTKARSH698 with @arieleli01212 as co-author — entra_conditional_access_policy_no_exclusion_gaps check (#11577)
@SAMurai-16 — entra_conditional_access_policy_groups_management_restricted check (#11342)
@vahidg — Azure PostgreSQL flexible server collection resilience fix (#11595)
@davletd — Azure keyvault_logging_enabled AuditEvent category fix (#11660)
@VasistAcharya — exchange_application_access_policy_restricts_mailbox_apps (#11247)
@Legin-ML — Filter scans at Resource Group level (#10657)
@Synchx00 — s3_bucket_object_public check (#9517)

See the full release notes on GitHub for the complete list of changes.

June 23, 2026

🗓️ Flexible Scan Scheduling

Available exclusively in Prowler Cloud. Prowler Local Server supports daily scans only.

You can now set a per-provider scan schedule from the Providers page. Pick a scan time and a repeat cadence: Daily, Every 48 hours, Weekly (with a day-of-week selector), or Monthly. Schedules can be edited or removed at any time, and a new scan never interrupts access to existing data.

All schedules are listed in one place under the Scheduled tab in Scan Jobs, showing each provider’s cadence, next scan, and last scan at a glance.

Read more in the scan scheduling documentation.

📚 DORA — Expanded Provider Coverage

Prowler extends DORA (Digital Operational Resilience Act, Regulation (EU) 2022/2554) coverage to Azure, GCP, Cloudflare, and Alibaba Cloud, mapping each provider’s existing checks across the five DORA pillars.

The framework follows the <name>_<version> naming convention as DORA_2022_2554.

Read more in the compliance documentation.

🚀 Guided Onboarding

Available exclusively in Prowler Cloud.

New accounts now get a guided first-run experience. The Overview greets you with an “Add your first provider” prompt: connect a provider so Prowler has something to scan and assess, then get started in one click (or skip for now).

From there, contextual empty states across the product point you to the next action rather than leaving you stuck. Attack Paths, for example, explains that you need a completed scan before it can build a graph and links straight to Scan Jobs, with a “See how it works” affordance for first-timers.

🔐 Optional SAML SSO `userType`

The SAML userType attribute is now optional. If your IdP does not send it, or sends it blank, Prowler keeps the user’s existing roles unchanged instead of replacing them with a fallback role.When userType is provided, Prowler still maps the user to the matching role. If that role does not exist yet, Prowler creates it with read-only access: visibility over all providers, with no management permissions.Read more in the SAML SSO documentation.

🏢 New Provider — Linode

Prowler now scans Linode (Akamai Cloud), covering its administration, compute, and networking services. Thanks to @varunmamillapalli for their 1st provider in Prowler!

Linode is not officially supported. For more information, contact us.

Read more in the Linode documentation. Explore all Linode checks at Prowler Hub.

🔍 Checks

AWS

Post-Quantum Cryptography readiness — get ahead of the migration to quantum-resistant cryptography:

cloudfront_distributions_pqc_tls_enabled — CloudFront distributions enforce a post-quantum TLS 1.3 security policy.
apigateway_domain_name_pqc_tls_enabled — API Gateway custom domain names use a post-quantum TLS security policy.
transfer_server_pqc_ssh_kex_enabled — Transfer Family servers use a post-quantum hybrid SSH key exchange.
acmpca_certificate_authority_pqc_key_algorithm — Private CA authorities use a post-quantum (ML-DSA) key algorithm (new acmpca service).
rolesanywhere_trust_anchor_pqc_pki — IAM Roles Anywhere trust anchors are backed by a post-quantum (ML-DSA) PKI (new rolesanywhere service).

Organization-wide governance:

securityhub_delegated_admin_enabled_all_regions — Security Hub has a delegated administrator, active in all opted-in regions, with organization auto-enable on. Thanks to @ernestprovo23!
config_delegated_admin_and_org_aggregator_all_regions — AWS Config has a delegated administrator and an organization aggregator covering all regions. Thanks to @ernestprovo23!

Machine learning:

sagemaker_clarify_exists — verifies at least one SageMaker Clarify processing job exists per scanned region, so bias-detection and model-explainability controls are in place. Thanks to @AlexanderSanin!

Azure

A large batch of new Azure checks spanning data, compute, identity, and networking:

Cosmos DB — automatic failover, continuous backup policy, minimum TLS 1.2, and public network access disabled.
MySQL & PostgreSQL Flexible Servers — geo-redundant backup and high availability.
AKS — auto-upgrade, Azure Monitor (Container Insights), local accounts disabled, and Microsoft Defender enabled.
Databricks — public network access disabled and secure cluster connectivity (no public IP).
Defender — CSPM on the Standard tier.
Networking — NSG association on subnets and DDoS Network Protection on VNets.
Entra ID — app registration credential expiry, users with recent sign-in and strong authentication enforcement.
Recovery Services — vaults with at least one protected backup item and vaults with adequate backup policy.

Thanks to @s1ns3nz0 for all these contributions!

GCP

New coverage for high availability and public-exposure detection:

cloudsql_instance_high_availability_enabled — Cloud SQL primary instances use REGIONAL availability for automatic zone failover.
cloudfunction_function_inside_vpc — Cloud Functions use a Serverless VPC Access connector for private egress.
cloudfunction_function_not_publicly_accessible — detects allUsers / allAuthenticatedUsers IAM invocation bindings.
secretmanager_secret_not_publicly_accessible — detects Secret Manager secrets with public IAM bindings.
secretmanager_secret_rotation_enabled — verifies Secret Manager secrets have automatic rotation configured with a period of 90 days or less and no missed rotation.

Thanks to @s1ns3nz0 for all these contributions!

Kubernetes

New core checks for container resource governance and reliability: CPU limits, CPU requests, memory limits, memory requests, fixed image tags, liveness probes, and readiness probes. Thanks to @Nikhilkumar2311 for all these contributions!

Microsoft 365

entra_directory_sync_object_takeover_blocked — hybrid Entra tenants block cloud object takeover through soft-match and hard-match directory synchronization. Thanks to @PrettyFox0 and @omobolajiadeyan!
entra_conditional_access_policy_no_deleted_object_references — flags Conditional Access policies that reference user, group, or role objects that no longer resolve in the directory. Thanks to @ernestprovo23!

Oracle Cloud Infrastructure

identity_storage_service_level_admins_scoped — CIS 3.1 control 1.15, ensuring storage service-level administrators exclude delete permissions.

Explore all checks at Prowler Hub.

🐍 Python 3.13 Support

The Prowler SDK now supports Python 3.13. Thanks to @branchv!

🔐 Security Updates

SDK — pytest 8.3.5 → 9.0.3, black 25.1.0 → 26.3.1, microsoft-kiota-* → 1.9.9, and aiohttp → 3.14.0, patching known CVEs.
API — aiohttp → 3.14.0 and idna → 3.15, patching known CVEs.
UI — bumped vulnerable Next.js, React, AI SDK, postcss, hono, qs, esbuild, and Alpine OpenSSL packages; dompurify 3.4.2 → 3.4.10, patching XSS sanitization bypass advisories.
Containers — base image bumped to python:3.12.13-slim-bookworm (patches libgnutls30 CVE-2026-33845 and CVE-2026-42010) and trivy to 0.71.0 (patches embedded golang.org/x/crypto and Go stdlib CVEs).

🙌 External Contributors

Thank you to our community contributors for this release!

@varunmamillapalli — New Linode provider: administration, compute, and networking services (#11633)
@s1ns3nz0 — 20+ Azure & GCP checks across Cosmos DB, AKS, Databricks, Flexible Servers, Entra, networking, and GCP public-exposure
@Nikhilkumar2311 — Kubernetes resource limits, requests, image tag, and probe checks (#11373)
@ernestprovo23 — AWS Security Hub/Config org-wide delegated admin checks (#11259) and M365 conditional access check (#11236)
@AlexanderSanin — sagemaker_clarify_exists check (#11211)
@PrettyFox0 with @omobolajiadeyan as co-author — M365 directory sync object takeover check (#11098)
@branchv — Python 3.13 support (#9293)
@alinealfa — GCP audit-filtered aggregated sinks fix (#11575)
@b-abderrahmane — Configurable Celery worker concurrency (#11075)

See the full release notes on GitHub for the complete list of changes.

Release notes for v5.30.0 and earlier, along with every patch release, are on GitHub Releases.

​🎫 Finding Groups - Jira

​🕸️ Attack Paths - Queries

​🧑‍🏫 New Tutorials: Connect Your AI Agents to Prowler Cloud

​☁️ Region-less Oracle Cloud Infrastructure Setup

​🔍 Checks

​AWS

​🔐 Security

​🙌 External Contributors

​💬 Lighthouse AI - Side Chat

​🤖 Lighthouse AI - Take Action

​☁️ One-step AWS Organizations onboarding

​🎯 Scan configurations: exclude checks and services

​🧭 Redesigned sidebar navigation

​🔌 Prowler MCP tools renamed to prowler_*

​🔐 Security

​🙌 External Contributors

​🏷️ New product names

​🧭 Cross-Provider Compliance

​🏢 New Provider — E2E Networks

​🔐 Security

​🔍 Checks

​AWS

​Azure

​Kubernetes

​STACKIT

​🙌 External Contributors

​🤖 Lighthouse AI — The Agentic Cloud Defender

​📄 Compliance PDF Reports Without Credentials

​⏳ Scan Queueing

​🔐 Security

​🙌 External Contributors

​🔎 Findings Triage

​⚙️ Scan Configuration

​✅ Per-Requirement Configuration Validation

​⏱️ Okta — Request Throttling & Retries

​📉 AWS — Cap Resources Scanned per Service

​🏷️ Azure — Filter by Resource Group

​🧭 Provider Group Filter

​🔬 API — Timestamp Precision in Findings Filters

​🕸️ Attack Paths — Neptune as a persistent sink

​🔐 New Secret-Scanning Engine — Kingfisher

​🔍 Checks

​AWS

​Microsoft 365

​📚 Compliance

​CIS Benchmark Refresh — Six New Versions

​CIS Controls v8.1 — Universal Framework

​🙌 External Contributors

​🗓️ Flexible Scan Scheduling

​📚 DORA — Expanded Provider Coverage

​🚀 Guided Onboarding

​🔐 Optional SAML SSO userType

​🏢 New Provider — Linode

​🔍 Checks

​AWS

​Azure

​GCP

​Kubernetes

​Microsoft 365

​Oracle Cloud Infrastructure

​🐍 Python 3.13 Support

​🔐 Security Updates

​🙌 External Contributors

🎫 Finding Groups - Jira

🕸️ Attack Paths - Queries

🧑‍🏫 New Tutorials: Connect Your AI Agents to Prowler Cloud

☁️ Region-less Oracle Cloud Infrastructure Setup

🔍 Checks

AWS

🔐 Security

🙌 External Contributors

💬 Lighthouse AI - Side Chat

🤖 Lighthouse AI - Take Action

☁️ One-step AWS Organizations onboarding

🎯 Scan configurations: exclude checks and services

🧭 Redesigned sidebar navigation

🔌 Prowler MCP tools renamed to `prowler_*`

🔐 Security

🙌 External Contributors

🏷️ New product names

🧭 Cross-Provider Compliance

🏢 New Provider — E2E Networks

🔐 Security

🔍 Checks

AWS

Azure

Kubernetes

STACKIT

🙌 External Contributors

🤖 Lighthouse AI — The Agentic Cloud Defender

📄 Compliance PDF Reports Without Credentials

⏳ Scan Queueing

🔐 Security

🙌 External Contributors

🔎 Findings Triage

⚙️ Scan Configuration

✅ Per-Requirement Configuration Validation

⏱️ Okta — Request Throttling & Retries

📉 AWS — Cap Resources Scanned per Service

🏷️ Azure — Filter by Resource Group

🧭 Provider Group Filter

🔬 API — Timestamp Precision in Findings Filters

🕸️ Attack Paths — Neptune as a persistent sink

🔐 New Secret-Scanning Engine — Kingfisher

🔍 Checks

AWS

Microsoft 365

📚 Compliance

CIS Benchmark Refresh — Six New Versions

CIS Controls v8.1 — Universal Framework

🙌 External Contributors

🗓️ Flexible Scan Scheduling

📚 DORA — Expanded Provider Coverage

🚀 Guided Onboarding

🔐 Optional SAML SSO `userType`

🏢 New Provider — Linode

🔍 Checks

AWS

Azure

GCP

Kubernetes

Microsoft 365

Oracle Cloud Infrastructure

🐍 Python 3.13 Support

🔐 Security Updates

🙌 External Contributors