prowler
https://github.com/prowler-cloud/prowler
Python
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuous monitoring, security assessments & audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST C
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported1 Subscribers
Add a CodeTriage badge to prowler
Help out
- Issues
- feat(azure): add Bleu sovereign cloud support
- Azure SQL unlimited audit retention incorrectly fails the retention check
- fix(sdk): recognize unlimited Azure SQL audit retention
- Azure Monitor alert checks reject case-equivalent conditions
- fix(sdk): match Azure alert conditions case-insensitively
- s3_bucket_secure_transport_policy passes buckets that still allow HTTP for most principals, actions or requests
- fix(s3): evaluate secure transport deny statements like IAM does
- feat(wafv2): add wafv2_webacl_managed_injection_rule_groups_enabled check
- ELBv2, Redshift, and EMR checks miss port-specific public TCP ingress
- enhancement(kubernetes): surface namespaces that failed to scan instead of returning a clean partial result
- Docs
- Python not yet supported