Repository Issues
prowler-cloud/prowler
Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.
Issues
Closed
[New Check]: Service principals with privileged Entra directory roles must not have owners
feature-requestgood first issuenew-checkprovider/m365
No assignee yetHas a beginner-friendly labelContributing guide available
3 comments0 reactions0 assignees
Closed
[New Check]: Mailbox primary SMTP address must use a verified custom domain (not .onmicrosoft.com)
feature-requestgood first issuenew-checkprovider/m365
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
3 comments0 reactions1 assignee
Closed
[New Check]: Microsoft Entra directory sync must block object takeover (soft- and hard-matching)
feature-requestgood first issuenew-checkprovider/m365
Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
1 comment0 reactions0 assignees
Closed
[New Check]: At least one Conditional Access policy must explicitly target Azure DevOps
feature-requestgood first issuenew-checkprovider/m365
Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
1 comment0 reactions0 assignees
Closed
[New Check]: Apps with Exchange mailbox permissions must be scoped via Application Access Policy
feature-requestgood first issuenew-checkprovider/m365
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
1 comment0 reactions1 assignee
Closed
[New Check]: Conditional Access policies must not reference deleted users, groups, or roles
feature-requestgood first issuenew-checkprovider/m365
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
1 comment0 reactions1 assignee
Closed
[New Check]: Conditional Access excluded objects must be covered by another policy (no exclusion gaps)
feature-requestgood first issuenew-checkprovider/m365
Why recommendedNo assignee yet · No comments yet
No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available
0 comments0 reactions0 assignees
Closed
[New Check]: Conditional Access groups must be protected by RMAU or role-assignable groups
feature-requestgood first issuenew-checkprovider/m365
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
2 comments0 reactions1 assignee
Closed
[New Check]: SageMaker model monitoring schedules are active
feature-requestgood first issuenew-checkprovider/aws
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
2 comments0 reactions1 assignee
Closed
[New Check]: SageMaker Clarify processing jobs exist
feature-requestgood first issuenew-checkprovider/aws
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
2 comments0 reactions1 assignee
Closed
[New Check]: Bedrock agent execution roles follow least privilege
feature-requestgood first issuenew-checkprovider/aws
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
2 comments0 reactions1 assignee
Open
Support OpenStack Application Credentials for authentication
feature-requesthelp wantednot-plannedprovider/openstack
Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
1 comment0 reactions0 assignees
Open
New Check: Ensure Continuous Access Evaluation (CAE) is enabled in Conditional Access policies
blockedfeature-requestgood first issuenew-checknot-plannedprovider/m365
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
6 comments0 reactions1 assignee
Open
Azure - filtering scans by Resource Groups
feature-requesthelp wantednot-plannedprovider/azure
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
21 comments0 reactions1 assignee
Closed
Org-aware checks for GuardDuty / Security Hub / AWS Config (Delegated Admin + all opted-in Regions)
feature-requesthelp wanted
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
7 comments0 reactions1 assignee
Closed
Unable to run a scan in AzureChinaCloud region
ai-issue-reviewbugcan't reproducehelp wantedprovider/azureseverity/critical
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
3 comments0 reactions1 assignee
Open
Add additional M365 compliance framework support for CISA M365 Secure Configuration Baselines
compliancefeature-requesthelp wanted
Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
3 comments0 reactions0 assignees
Closed
Add Support for Google Workspace admin settings
feature-requesthelp wantedplannedsource/slack
Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
3 comments3 reactions0 assignees
Open
Issues getting remediation data into compliance CSV outputs
feature-requesthelp wanted
Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
4 comments1 reaction1 assignee
Open
Include Kubernetes Cluster Name in Compliance Report Output
feature-requesthelp wanted
Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
1 comment0 reactions0 assignees