Checks
Browse individual security checks available in the Prowler Registry. Filter by cloud provider, severity, or search by check ID.
Browse individual security checks available in the Prowler Registry. Filter by cloud provider, severity, or search by check ID.
clusters_authentication_enabled
MongoDB Atlas clusters enforce database authentication for client connections (authEnabled).
Identifies clusters where authentication is not required for access.
clusters_backup_enabled
MongoDB Atlas clusters have automated backups enabled (cloudBackup/backup_enabled) to generate snapshots and support restore operations
clusters_encryption_at_rest_enabled
MongoDB Atlas clusters are evaluated for encryption at rest. The check looks for a supported encryption provider configured (not NONE) or storage-level encryption enabled (e.g., encryptEBSVolume=true). Unsupported providers or explicit disablement are highlighted.
clusters_tls_enabled
MongoDB Atlas clusters require TLS/SSL for client connections to encrypt data in transit (sslEnabled=true).
organizations_api_access_list_required
MongoDB Atlas organizations can require Atlas Administration API requests to originate only from IPs or CIDRs listed in the organization's API access list (apiAccessListRequired).
organizations_mfa_required
MongoDB Atlas organization mandates multi-factor authentication for all members before accessing organization resources (multi_factor_auth_required).
organizations_security_contact_defined
MongoDB Atlas organizations specify a designated security contact email to receive security notifications and advisories.
Assesses whether this contact is configured at the organization level.
organizations_service_account_secrets_expiration
MongoDB Atlas organization setting maxServiceAccountSecretValidityInHours caps the lifetime of new Admin API service account secrets. Evaluation focuses on whether a limit is configured and whether it is at or below the defined policy threshold (default 8 hours).
projects_auditing_enabled
MongoDB Atlas projects with database auditing capture database operations and administrative events. The evaluation looks for an active audit configuration and, when present, notes any configured audit_filter that scopes which events are recorded.
projects_network_access_list_exposed_to_internet
MongoDB Atlas project network access list configuration is evaluated for entries that allow access from anywhere (0.0.0.0/0, ::/0, 0.0.0.0, ::) or for missing access lists, instead of restricting connections to specific IPs or CIDRs.