Features based roadmap for Prowler (this Open Source and it is valid for both on-prem/self-hosted and Prowler Cloud service)

Backlog

Next up

In Progress

Done

Roadmap

Be able to run custom checks from the app.

In Review

Run Custom checks from the App

Toni de la Fuente

Schedule scans customized

Report Download in PDF / custom logo

Importer: inject a Prowler scan (CSV or JSON OCSF) to Prowler via API-UI

Option on the resource to pull information from CloudTrail to see who made the change on a given resource that made it change status of a finding related

Who did this?

As an auditor, I want to see the delta results between to selected dates in order to see what has been improved or unimproved in the security posture.

Compare assessments between two dates

Comprehensive Main Dashboard

Mute list via dedicated UI and action per finding/resource

In the findings view show findings by occurrences based on impacted resources.

Findings grouping

toni

Add MFA option for login in Prowler App (except for Social Login and SSO)

Send findings (and also only fail findings) to AWS Security Hub

Planned

Integrations

Connector: AWS Security Hub

Send findings or group of findings to Jira to assign for remediation.Close them if finding changes status from FAIL to PASS.

Connector: Jira

M365 Support as a provider

Send specific findings to Slack or an overview each scan

Connector: Slack

Send outputs to a customer owned S3 bucket

Connector: S3

using the yaml file via the UI, interface for that yaml file and button on each finding to mute it.

Mute list via configuration file

규정 준수 상세 보기

Compliance detailed view

Allow SSO login with SAML for Okta and others

Connector: SSO with SAML

Resource view / inventory

Every page must have the filters date/account/region/severity/tags/resource type/check type/check-categories/include muted findings

Filters

Show all available fields in the finding panel in the UI

export in the same format as the standard csv output.This should allow export all findings with applied filters.

Completed

Export as CSV (or other outputs format) from findings view/table

RBAC

Compliance cards

Documentation: API usage

Finding parameter “First seen”, “how old is the finding”

Installation instructions fro CLI mode and Server mode

Documentation

Provider overviewFindings by statusFindings by severityNew fail findings to date

Overview page with basic information - trends

Connector: Social Login - Google

As a Prowler administrator I want to be able to add a new account provider to launch only one scan as opposite that setting it up as scheduled by default.

Allow setting first scan as manual at launch/provisioning

Schedule scans default every day

Help Center

Improved

Fixed

prowler

Rejected

High Priority

Low Priority

Medium Priority

Docs

Please, give us feedback if we are missing something that you would like to have in Prowler

What else?

Missing something? See here what is coming!