Feature-based roadmap, applicable to all our products and deployment types as in:<ul><li>Prowler Cloud: our SaaS, Multi-tenant, Fully Managed, Ent. Support.</li><li>Prowler Cloud Enterprise: Single tenant, Prowler Managed, in your VPC, in your Data Center, even air-gapped.</li><li>Prowler OSS: CLI, UI, Community Supported.</li></ul>

Backlog

Next up

In Progress

Done

Roadmap

adding Censys for Cloud and Enteprise only. Once configuration is done, this will be available

In Review

Integrations: Shodan, allow adding API Key to make Shodan checks work from the App

Toni de la Fuente

Add 2FA-MFA option for login in Prowler App (except for Social Login and SSO)

for requirments without check or checks associated allow upload evidence like screenshot or text.

Compliance: add evidence to manual requirements

Terraform provider of Prowler App for provisioning and configuration

as auditor, I wan to add my own tags to know status during my auditory, must be fixed before X day, etc

Add Prowler custom tag/logo to finding/resource

Be able to run custom checks from the app.

Planned

Run Custom checks from the App

As an auditor, I want to see the delta results between to selected dates in order to see what has been improved or unimproved in the security posture.

Compare assessments between two dates

export in the same format as the standard csv output.This should allow export all findings with applied filters.

Export as CSV (or other outputs format) from findings view/table - custom configuration - Cloud and Enterprise only

Send specific findings to Slack or an overview each scan

Connector: Slack

Connector: Teams

Connector: PagerDuty

GovCloud AWS Marketplace

Send Multiple Findings and Resources to Jira - Prowler Cloud and Prowler Enterprise

Amit Sharma

<ul><li>Set status on Findings</li><li>Allow to add comments on Findings</li></ul>

Triage workflow - Prowler Cloud and Prowler Enterprise

Schedule scans customized - Cloud and Enterprise only

config file with all options, custom metadata, mutelist, shodan api key, etc.

Scanner configuration options similar to the CLI but in the UI - this is coming for Cloud and Enterprise only

Completed

M365 Support as a provider

Mute specific findings

Compliance Report Download in PDF

Import Findings in OCSF into Prowler Cloud

Send findings or group of findings to Jira to assign for remediation.Close them if finding changes status from FAIL to PASS.

Integrations

High Priority

Integration - Jira

Option on the resource to pull information from CloudTrail to see who made the change on a given resource that made it change status of a finding related

AWS - Who did this?

규정 준수 상세 보기

Compliance detailed view  in the UI and Cloud

Send findings (and also only fail findings) to AWS Security Hub

Integration - AWS Security Hub

As an auditor, I want to be able to add all needed AWS accounts based on AWS Organizations, all Azure subscriptions that Prowler can access, all GCP subscriptions that Prowler can access and all namespaces of the Kubernetes cluster with access.

Multi accounts/projects/subscriptions provisioning support in the UI

Allow SSO login with SAML for Okta and others

Integration - SAML SSO

<ul><li>Include resource tags</li></ul>

Resource view / inventory

Help Center

Improved

Fixed

prowler

Rejected

Low Priority

Medium Priority

Docs

Cloud

5.10

Please, give us feedback if we are missing something that you would like to have in Prowler

What else?

Missing something? See here what is coming!