Skip to content

Releases: prowler-cloud/prowler

Prowler 5.0.5 - Powerslave

23 Dec 14:27
@MrCloudSec MrCloudSec
5.0.5
46e7ecc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 5.0.5 - Powerslave Latest
Latest

What's Changed

Full Changelog: 5.0.4...5.0.5

Contributors

MrCloudSec and prowler-bot
Assets 2
Loading

Prowler 5.0.4 - Powerslave

20 Dec 17:01
@MrCloudSec MrCloudSec
5.0.4
dc4b771
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 5.0.4 - Powerslave

What's Changed

Fixes

  • fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out by @prowler-bot in #6292
  • fix(db-utils): fix batch_delete function by @prowler-bot in #6285
  • fix(users): fix /users/me behavior when having more than 1 users in the same tenant by @prowler-bot in #6288

Chores

Full Changelog: 5.0.3...5.0.4

Contributors

MrCloudSec and prowler-bot
Assets 2
Loading

Prowler 5.0.3 - Powerslave

19 Dec 22:21
@MrCloudSec MrCloudSec
5.0.3
17e1472
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 5.0.3 - Powerslave

What's Changed

Fixes

Chores

Full Changelog: 5.0.2...5.0.3

Contributors

jfagoagas and prowler-bot
Assets 2
Loading

Prowler 5.0.2 - Powerslave

18 Dec 18:22
@jfagoagas jfagoagas
5.0.2
5d41c6a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 5.0.2 - Powerslave

API

Fixes

Chores

SDK

Fixes

Chores

Full Changelog: 5.0.1...5.0.2

Contributors

MrCloudSec and prowler-bot
Assets 2
Loading

Prowler 5.0.1 - Powerslave

13 Dec 19:16
@MrCloudSec MrCloudSec
5.0.1
83ffd78
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 5.0.1 - Powerslave

UI

Fixes

Chores

API

Fixes

SDK

Fixes

Chores

Full Changelog: 5.0.0...5.0.1

Contributors

prowler-bot
Assets 2
Loading

Prowler 4.6.2 - Blood Brothers

10 Dec 21:11
@MrCloudSec MrCloudSec
4.6.2
4fb0108
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.6.2 - Blood Brothers

What's Changed

Fixes

Chores

Full Changelog: 4.6.1...4.6.2

Contributors

dependabot, MrCloudSec, and prowler-bot
Assets 2
Loading

Prowler 5.0.0 - Powerslave 🚀

03 Dec 16:42
@MrCloudSec MrCloudSec
5.0.0
52723ed
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 5.0.0 - Powerslave 🚀

Tell me why I had to be a powerslave
I don't wanna die, I'm a god
Why can't I live on?
When the life giver dies
All around is laid waste
And in my last hour
I'm a slave to the power of death

Powerslave was the fifth studio album by Iron Maiden, released on 3 September 1984. 🎸 Fast forward 40 years and 3 months later, we are thrilled to announce the release of Prowler 5.0 a.k.a. Powerslave — our most advanced and comprehensive release to date. Powerslave, also the seventh song on that iconic album, was written by Bruce Dickinson and explores an Egyptian pharaoh's wondering why he has to die, we know that is exactly what we think about Open Source, as soon as it is released, a piece of Open Source software will never die. 🌟

Prowler 5.0.0 - Powerslave is meant to be a game changer 🕹️ in the Cloud Security space as it comes with many new and needed features for our community of users and customers. If we want the cloud adoption to keep growing, we need more Open Source software to help gain confidence in the cloud with open, agnostic and transparent tools, that is what we call of the Open Cloud Security movement. 🌐

prowler5overview

🎉 What's New?

🖥️ Enhanced UI, API, SDK, and Persistent Storage

  • A brand-new UI component to unify all scans and drill down into findings and more.
  • Robust APIs to solve a variety of use cases.
  • SDKs for seamless integration and automation.
  • Persistent storage for reporting, ensuring that your security insights are comprehensive and always accessible.

🔄 Continuous Monitoring and One-Time Assessments

  • Support for both continuous monitoring and ad-hoc security assessments.
  • Why settle for one-time assessments when you can stay continuously protected? 🛡️

📚 Expanded Detection and Remediation Control Framework

  • Over 1,000 security controls across AWS, Azure, Google Cloud, and Kubernetes.
  • Numerous remediation options to secure your cloud infrastructure effectively.

🤖 AI-Driven Control Creation

  • Leveraging artificial intelligence to automatically generate new detection checks and remediations.
  • Stay ahead of the latest threats with cutting-edge security measures. ⚡

💾 Get Started

From today, you can:

  • Use the Prowler platform on-premises by downloading and running it yourself. As usual, using just the powerful CLI with the same output formats as always (pipx install prowler), or for the whole platform together with new components, just run docker compose up -d from the root folder of Prowler repo, open https://localhost:3000, add your user and start making your cloud secure.
  • Or use all in one place, Prowler as a Cloud Service managed by us 🌩️ Visit prowler.com and sign up for 15 days free and let us know what do you think! 🗨️

🔮 What’s Next?

We're continuously adding new features! Keep track of upcoming updates here: roadmap.prowler.com 🛠️

Join us on this journey to revolutionize Open Cloud Security. 🌟

Assets 2
Loading

Prowler 4.6.1 - Blood Brothers

29 Nov 16:16
@MrCloudSec MrCloudSec
4.6.1
e771218
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.6.1 - Blood Brothers

What's Changed

Fixes

Full Changelog: 4.6.0...4.6.1

Contributors

prowler-bot
Assets 2
Loading

Prowler 4.6.0 - Blood Brothers

25 Nov 17:58
@MrCloudSec MrCloudSec
4.6.0
94b6fbd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.6.0 - Blood Brothers

And as you look all around at the world in dismay
What do you see, do you think we have learned?
Not if you're taking a look at the war-torn affray
Out in the streets where the babies are burnt

Prowler 4.6.0 - Blood Brothers 🚀 has arrived! Packed with exciting new AWS checks, fixers, and expanded Azure coverage, this release takes your cloud security to the next level. 🎸 While you explore, enjoy the classic Iron Maiden song that inspired this release.

This release is dedicated to the honor and memory of our contributor and friend Javier Hijas who helped Prowler and the Cloud Security Community with his talent over the last years, you will be always in our hearts Javi. Also, special thanks to our amazing new contributors: @drewkerrigan, @metahertz, and @vicferpoy! ⭐ We’d also like to thank @normanecg for all ENS features, @sansns, @StylusFrost, @garym-krrv, and @thomscode for their continued efforts and valuable PRs that keep improving Prowler! 🙌🚀

New features to highlight in this version

AWS

🔒 IAM Root Credentials Management

AWS recently introduced the ability to centrally manage root credentials with AWS Organizations (read more). Prowler now supports this feature with the new check iam_root_credentials_management_enabled, letting you verify whether root credentials management is enabled in your AWS account.

Try it out: prowler aws -c iam_root_credentials_management_enabled

🧑‍🔧 6 New Fixers!

Prowler now includes 6 new fixers to help you automatically remediate misconfigurations in AWS services like DocumentDB, EC2, KMS, Neptune, and RDS.
Run a specific fixer with:

prowler aws -c <check_id> --fixer

See all the new available fixers with prowler aws --list-fixers

1. documentdb_cluster_public_snapshot
2. ec2_ebs_public_snapshot
3. kms_cmk_not_deleted_unintentionally
4. neptune_cluster_public_snapshot
5. rds_instance_no_public_access
6. rds_snapshots_public_access

🚀 13 New AWS Checks Across 10 Services!

We’ve significantly expanded AWS coverage with 13 new checks, enhancing your security and compliance for services like AppSync, DMS, Firehose, Glue, Kinesis, and IAM.

See all the new available checks with prowler aws --list-checks

1. appsync_field_level_logging_enabled
2. appsync_graphql_api_no_api_key_authentication
3. dms_endpoint_redis_in_transit_encryption_enabled
4. dms_replication_task_source_logging_enabled
5. dms_replication_task_target_logging_enabled
6. firehose_stream_encrypted_at_rest
7. glue_etl_jobs_logging_enabled
8. iam_root_credentials_management_enabled
9. kinesis_stream_data_retention_period
10. memorydb_cluster_auto_minor_version_upgrades
11. mq_broker_not_publicly_accessible
12. servicecatalog_portfolio_shared_within_organization_only
13. storagegateway_gateway_fault_tolerant

⚙️ Improved Handling of Unknown Resources

Prowler now avoids creating mocked resource ARNs or IDs for non-existent resources. Instead, it will generate a standardized "Unknown" ARN and ID using the following patterns:

  • Unknown resource ARN: arn:<partition>:<service>:<region>:<account-id>:resource-type/unknown
  • Unknown resource ID: resource-type/unknown

Azure

💪🏼 New Azure AI Search Check

Thanks to our great contributor @StylusFrost, Prowler now includes Azure AI Search coverage with the new checkaisearch_service_not_publicly_accessible

Give it a try by scanning the Azure Container Registry with prowler azure --service aisearch

🇪🇸📜 Added ENS Compliance Framework

Thanks to @normanecg, Prowler now supports the ENS RD2022 compliance framework for Azure, ensuring enhanced compliance for Spanish organizations.

Give it a try with prowler azure --compliance ens_rd2022_aws

GCP

🇪🇸📜 New ENS Compliance Framework

We’re excited to announce that Prowler now includes the ENS RD2022 compliance framework for GCP, courtesy of @normanecg!

Give it a try with prowler gcp --compliance ens_rd2022_aws

🔧 Other issues and bug fixes solved for all the cloud providers

What's Changed

Features

Fixes

Read more

Contributors

drewkerrigan, thomscode, and 15 other contributors
Assets 2
Loading

Prowler 4.5.3 - Another Life

14 Nov 17:38
@MrCloudSec MrCloudSec
4.5.3
f604ab7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.5.3 - Another Life

What's Changed

Full Changelog: 4.5.2...4.5.3

Contributors

MrCloudSec and prowler-bot
Assets 2
Loading