Feature-based roadmap, applicable to all our products and deployment types as in:<ul><li>Prowler Cloud: our SaaS, Multi-tenant, Fully Managed, Ent. Support.</li><li>Prowler Dedicated: Single tenant, Prowler Managed, in your VPC.</li><li>Prowler Self-Managed: CLI, Community Supported.</li></ul>

Backlog

Next up

In Progress

Done

Roadmap

In Review

Schedule scans customized

Toni de la Fuente

Be able to run custom checks from the app.

Run Custom checks from the App

As an auditor, I want to see the delta results between to selected dates in order to see what has been improved or unimproved in the security posture.

Compare assessments between two dates

config file with all options, custom metadata, mutelist, shodan api key, etc.

Scanner configuration options similar to the CLI but in the UI

Integrations: Shodan, allow adding API Key to make Shodan checks work from the App

Send specific findings to Slack or an overview each scan

Connector: Slack

Add 2FA-MFA option for login in Prowler App (except for Social Login and SSO)

for requirments without check or checks associated allow upload evidence like screenshot or text.

Compliance: add evidence to manual requirements

Terraform provider of Prowler App for provisioning and configuration

Allow user remediate certain failed findings from the UI/API

Remediations from the app (UI/API)

As an auditor, I want to be able to add all needed AWS accounts based on AWS Organizations, all Azure subscriptions that Prowler can access, all GCP subscriptions that Prowler can access and all namespaces of the Kubernetes cluster with access.

Planned

Multi accounts/projects/subscriptions provisioning support in the UI

Importer: inject a Prowler scan (CSV or JSON OCSF) to Prowler via  CLI and API-UI

Option on the resource to pull information from CloudTrail to see who made the change on a given resource that made it change status of a finding related

AWS - Who did this?

export in the same format as the standard csv output.This should allow export all findings with applied filters.

Export as CSV (or other outputs format) from findings view/table

Provider Cloudflare

Provider OpenStack

Pepe Fagoaga

Completed

M365 Support as a provider

Mute specific findings

Compliance Report Download in PDF

Send findings or group of findings to Jira to assign for remediation.Close them if finding changes status from FAIL to PASS.

Integrations

High Priority

Integration - Jira

규정 준수 상세 보기

Compliance detailed view  in the UI and Cloud

Send findings (and also only fail findings) to AWS Security Hub

Integration - AWS Security Hub

Allow SSO login with SAML for Okta and others

Integration - SAML SSO

<ul><li>Include resource tags</li></ul>

Resource view / inventory

IaC Scan using Trivy in Prowler CLI (done) and WebUI

Comprehensive Main Dashboard

Cartography - Resource Inventory and Attack Paths

Help Center

Improved

Fixed

prowler

Rejected

Low Priority

Medium Priority

Docs

Cloud

5.10

Please, give us feedback if we are missing something that you would like to have in Prowler

What else?

Missing something? See here what is coming!