Feature-based roadmap, applicable to both on-premise deployments and <a target="" rel="noopener noreferrer nofollow" class="link" href="https://cloud.prowler.com/">Prowler Cloud</a>.

Backlog

Next up

In Progress

Done

Roadmap

Be able to run custom checks from the app.

In Review

Run Custom checks from the App

Toni de la Fuente

As an auditor, I want to see the delta results between to selected dates in order to see what has been improved or unimproved in the security posture.

Compare assessments between two dates

Importer: inject a Prowler scan (CSV or JSON OCSF) to Prowler via  CLI and API-UI

Option on the resource to pull information from CloudTrail to see who made the change on a given resource that made it change status of a finding related

Who did this?

Add 2FA-MFA option for login in Prowler App (except for Social Login and SSO)

for requirments without check or checks associated allow upload evidence like screenshot or text.

Compliance: add evidence to manual requirements

config file with all options, custom metadata, mutelist, shodan api key, etc.

Scanner configuration options similar to the CLI but in the UI

Integrations: Shodan, allow adding API Key to make Shodan checks work from the App

Allow user remediate certain failed findings from the UI/API

Remediations from the app (UI/API)

Terraform provider of Prowler App for provisioning and configuration

using the yaml file via the UI, interface for that yaml file and button on each finding to mute it.

Planned

Mute list including a finding action in the UI and Cloud and action per finding/resource

Send findings or group of findings to Jira to assign for remediation.Close them if finding changes status from FAIL to PASS.

Integrations

High Priority

Integration - Jira

Report Download in PDF / custom logo

Send findings (and also only fail findings) to AWS Security Hub

Integration - AWS Security Hub

Schedule scans customized

export in the same format as the standard csv output.This should allow export all findings with applied filters.

Export as CSV (or other outputs format) from findings view/table

As an auditor, I want to be able to add all needed AWS accounts based on AWS Organizations, all Azure subscriptions that Prowler can access, all GCP subscriptions that Prowler can access and all namespaces of the Kubernetes cluster with access.

Multi accounts/projects/subscriptions provisioning support in the UI

Every page must have the following filters:<ul><li>resource tags</li><li>check type</li><li>check categories</li><li>include muted findings</li><li>compliance</li></ul>

Additional Filters

Comprehensive Main Dashboard

Cartography like graph view

<ul><li>Include resource tags</li></ul>

Resource view / inventory

Allow SSO login with SAML for Okta and others

Integration - SAML SSO

Send outputs to a customer owned S3 bucket

Integration - Amazon S3

Support for the classic Mutelist, allowing users to customize muting rules per check, region, resource, tag, and account. This configuration can be managed directly through a modal with add/edit/delete capabilities and will be applied automatically to all future scans once saved. This enables fine-grained control and exceptions handling, improving scan accuracy and reducing noise.

Advanced Mutelist - YAML editor-import

Pepe Fagoaga

API token for programatic access to Prowler API

Every assessment, Lighthouse will provide the most important information as advice in the overview page for the user to know what to do.

Lighthouse - proactive advisory

Completed

M365 Support as a provider

규정 준수 상세 보기

Compliance detailed view  in the UI and Cloud

NIS2 support for AWS, Azure and GCP.

Compliance cards

RBAC

Lighthouse

Documentation: API usage

Finding parameter “First seen”, “how old is the finding”

Resource tags in Findings

Installation instructions fro CLI mode and Server mode

Documentation

Provider overviewFindings by statusFindings by severityNew fail findings to date

Overview page with basic information - trends

Help Center

Improved

Fixed

prowler

Rejected

Low Priority

Medium Priority

Docs

Cloud

Please, give us feedback if we are missing something that you would like to have in Prowler

What else?

Missing something? See here what is coming!