Issues

• [New Check]: Entitlement management hygiene checks ported from Maester

  prowler-cloud/prowler#13014 · Filter by author kinomakino opened on Oct 9, 2026

• [New Check]: Users holding Tier 0 roles should not be stale

  prowler-cloud/prowler#13013 · Filter by author kinomakino opened on Oct 9, 2026

• [New Check]: Tier 0 directory roles must not have standing assignments

  prowler-cloud/prowler#13012 · Filter by author kinomakino opened on Oct 9, 2026

• [New Check]: Enterprise apps should require explicit user assignment

  prowler-cloud/prowler#13011 · Filter by author kinomakino opened on Oct 9, 2026

• [New Check]: Authentication method policies must not reference deleted groups

  prowler-cloud/prowler#13010 · Filter by author kinomakino opened on Oct 9, 2026

• [Documentation]: Two GIFs in contrib/terraform-kickstarter/readme.md are dead (prowler-docs.s3.amazonaws.com returns 404)

  prowler-cloud/prowler#13008 · Filter by author auroraxo opened on Oct 9, 2026

• [New Check]: Directory sync checks for krbtgt_AzureAD and the onPremisesObjectIdentifier bypass

  prowler-cloud/prowler#13002 · Filter by author kinomakino opened on Oct 8, 2026

• [New Check]: App registration certificate lifetime and expiry checks

  prowler-cloud/prowler#13001 · Filter by author kinomakino opened on Oct 8, 2026

• [New Check]: Conditional Access hygiene checks ported from Maester

  prowler-cloud/prowler#13000 · Filter by author kinomakino opened on Oct 8, 2026

• [New Check]: Entra authorization policy must block the legacy MSOnline PowerShell module

  prowler-cloud/prowler#12999 · Filter by author kinomakino opened on Oct 8, 2026

• [New Check]: Entra dynamic groups must not use the retiring memberOf rule

  prowler-cloud/prowler#12998 · Filter by author kinomakino opened on Oct 8, 2026

• [Bug]: Local dashboard Overview trend chart ignores the account filter

  prowler-cloud/prowler#12983 · Filter by author albority opened on Oct 8, 2026

• Alibaba Cloud ECS SSH/RDP internet checks miss security group rules open to ::/0

  prowler-cloud/prowler#12981 · Filter by author 0xTaoZ opened on Oct 8, 2026

• Alibaba Cloud rds_instance_no_public_access_whitelist passes every instance because the whitelist is never read

  prowler-cloud/prowler#12979 · Filter by author 0xTaoZ opened on Oct 8, 2026

• Add Claude and ChatGPT platforms Providers in Prowler Local Server

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12978 · Filter by author stenioignacio-jacto opened on Oct 7, 2026

• CSV formula injection in the dashboard export

  prowler-cloud/prowler#12975 · Filter by author pedrooot opened on Oct 7, 2026

• [New Check]: S3 Contents Not Encrypted At Rest

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12949 · Filter by author baggers27 opened on Oct 5, 2026

• Azure NSG checks ignore sourceAddressPrefixes (plural), missing rules open to 0.0.0.0/0 (false negative)

  bugstatus/needs-triage
  prowler-cloud/prowler#12946 · Filter by author pouria-l opened on Oct 4, 2026

• GitHub: authenticate with an App installation token, so the App key can stay in a KMS/HSM

  prowler-cloud/prowler#12930 · Filter by author mhan8796 opened on Oct 3, 2026

• M365: Workload Identity Federation (client assertion) authentication, like Azure #11389

  prowler-cloud/prowler#12929 · Filter by author mhan8796 opened on Oct 3, 2026

• [Feature]: Local dashboard: show AWS account names

  prowler-cloud/prowler#12928 · Filter by author albority opened on Oct 3, 2026

• [Bug]: Local dashboard Compliance sections vanish after expanding (Tailwind .collapse overrides Bootstrap accordion)

  prowler-cloud/prowler#12927 · Filter by author albority opened on Oct 2, 2026

• Azure AI Services service (Azure OpenAI, AI Foundry, Cognitive Services) with security checks

  feature-requeststatus/needs-triage
  prowler-cloud/prowler#12924 · Filter by author rajeshnadiminti opened on Oct 2, 2026
  

• Oracle Cloud network exposure checks miss IPv6 ::/0 source ranges, reporting a false negative

  prowler-cloud/prowler#12919 · Filter by author sandiyochristan opened on Sep 30, 2026

• CloudFormation scan role lacks permissions for the Lambda layer and Amplify secret checks

  prowler-cloud/prowler#12918 · Filter by author oleksii-udovychenko opened on Sep 30, 2026