🔧 Critical Fixes

• ✅ License Key Viewing Fixed - Resolved password verification bug (bcrypt library mismatch)
• ✅ Database Restore Working - Fixed CSRF token handling for backup restore functionality
• ✅ UI Improvements - Removed annoying real-time monitoring notifications on every page load
• ✅ Login Form Alignment - Fixed authentication page layout issues

🔐 Security Enhancements

• Enhanced password verification with comprehensive audit logging
• Improved error handling without exposing sensitive information
• Added validation for password hash integrity
• Real-time 2FA adoption statistics in security configuration

📊 Admin Panel Improvements

• Accurate 2FA statistics showing actual user adoption rates
• Better license key management with secure password-protected viewing
• Enhanced JavaScript modal handling with proper error recovery
• Improved debugging with structured logging

See full details in CHANGELOG.md

✨ Features

🔍 Security Scanning

• Multi-Cloud Support: AWS, GCP, Azure
• 100+ Security Checks: IAM, Storage, Databases, Networks, Encryption
• Real-Time Scanning: Live progress monitoring
• Severity Classification: Critical, High, Medium, Low
• Remediation Guidance: Step-by-step fix instructions

🤖 AI-Powered Assistance

• Gemini AI Chatbot: 24/7 security guidance
• Context-Aware: Understands your findings
• Best Practices: Industry-standard recommendations
• Interactive Help: Ask questions, get answers

📊 Compliance & Reporting

• 4 Major Frameworks: SOC 2, ISO 27001, GDPR, HIPAA
• PDF Report Generation: Professional, branded reports
• Timezone Support: Reports in your local timezone (including Sri Lanka UTC+5:30)
• Historical Tracking: Trend analysis over time
• Export Options: PDF and CSV formats
• Compliance Dashboard: Real-time posture tracking

🔐 Enterprise Security

• Two-Factor Authentication: Mandatory 2FA
• Role-Based Access: Admin & User roles
• Real-Time Alerts: Enterprise alert aggregation API
• Credential Encryption: Fernet encryption at rest
• Audit Logging: Complete activity trail
• Session Management: Secure timeout handling

📥 Installation

Option 1: Windows Installer (Recommended for Windows Users)

Latest: v0.9.2 - Windows installer with bug fixes and enhanced security!

1. Download the Installer

   • Go to Releases
   • Download AegisCloudScanner_Professional_Setup_v0.8.exe

2. Run the Installer

   • Right-click the installer → "Run as administrator"
   • Follow the installation wizard
   • The installer will automatically:
     • Install GTK3 runtime (for PDF generation)
     • Install Python dependencies via pip
     • Create desktop shortcut
     • Set up start menu shortcuts

3. Launch the Application

   • Double-click the desktop shortcut "Aegis Cloud Scanner"
   • Or use Start Menu → "Aegis Cloud Scanner"
   • Application opens at http://localhost:5000

What gets installed:

• Application files in C:\Program Files (x86)\Aegis Cloud Security Scanner\
• User data in %LOCALAPPDATA%\AegisScanner\
• Desktop and Start Menu shortcuts
• GTK3 runtime for PDF generation

Option 2: Python Installation (All Platforms)

Prerequisites

1. Install Python 3.13+

Windows:

1. Download from python.org
2. Run installer and CHECK "Add Python to PATH"
3. Verify installation:

   python --version
   pip --version
   

If Python is not in PATH:

1. Find Python installation (usually C:\Users\<username>\AppData\Local\Programs\Python\Python313\)
2. Add to PATH:
   • Right-click "This PC" → Properties
   • Advanced system settings → Environment Variables
   • Under "System variables", select "Path" → Edit
   • Click "New" and add:
     • C:\Users\<username>\AppData\Local\Programs\Python\Python313\
     • C:\Users\<username>\AppData\Local\Programs\Python\Python313\Scripts\
   • Click OK on all dialogs
   • Restart Command Prompt

macOS/Linux:

# macOS with Homebrew
brew install python@3.13

# Ubuntu/Debian
sudo apt update
sudo apt install python3.13 python3-pip python3-venv

# Verify
python3 --version
pip3 --version

2. Install Git (Optional but recommended)

• Windows: Download from git-scm.com
• macOS: brew install git
• Linux: sudo apt install git

Installation Steps

1. Clone or Download the Repository

   # With Git
   git clone https://github.com/SubashUduwaka/cloud-security-scanner.git
   cd cloud-security-scanner
   
   # Or download ZIP from GitHub and extract
   

2. Create Virtual Environment

   # Windows
   python -m venv venv
   venv\Scripts\activate
   
   # macOS/Linux
   python3 -m venv venv
   source venv/bin/activate
   

3. Install Dependencies

   # Upgrade pip first
   pip install --upgrade pip
   
   # Install requirements
   pip install -r requirements.txt
   

4. Run the Application

   Production Mode (Recommended):

   # Windows
   START_AEGIS.bat
   
   # macOS/Linux
   ./start_aegis.sh
   # or
   python3 run_production.py
   

   Development Mode (for developers):

   # Windows
   START_AEGIS_DEV.bat
   
   # macOS/Linux
   ./start_aegis.sh dev
   # or
   python3 app.py
   

   Differences:

   • Production: Uses Waitress WSGI server (multi-threaded, production-ready)
   • Development: Uses Flask dev server (auto-reload, debug mode)

5. Access the Application

   • Open browser: http://localhost:5000
   • Complete initial setup wizard
   • Enable 2FA for security

Option 3: Docker Deployment

Available Now: Run Aegis in a containerized environment!

# Clone the repository
git clone https://github.com/SubashUduwaka/cloud-security-scanner.git
cd cloud-security-scanner

# Using Docker Compose (Recommended)
docker-compose up -d

# Or build and run manually
docker build -t aegis-scanner .
docker run -p 5000:5000 -v aegis-data:/app/instance aegis-scanner

Access: Navigate to http://localhost:5000

Download Pre-built Image: Available in Releases as .tar file

🧹 Cleaning Up Old Versions

If you have previous versions installed, follow these steps:

Windows Installer Versions

1. Go to Settings → Apps → Apps & features
2. Search for "Aegis Cloud Scanner"
3. Click Uninstall

Manual Python Installations

1. Delete Application Directory

   • Remove the folder where you cloned/extracted Aegis

2. Delete User Data (Optional - removes your settings and database)

   • Press Win + R, type: %LOCALAPPDATA%
   • Delete AegisScanner folder

3. Delete Legacy Data Locations (if upgrading from v0.7 or earlier)

   # Old locations that may exist:
   %USERPROFILE%\.aegisscanner\
   %APPDATA%\aegis-scanner\
   

4. Deactivate Virtual Environment

   deactivate  # if virtual environment is active
   

🚀 Quick Start

First-Time Setup

1. Launch Application

   • Via installer: Click desktop shortcut
   • Via Python: Run START_AEGIS.bat or python app.py

2. Create Account

   • Navigate to http://localhost:5000
   • Click "Register"
   • Fill in email, username, password
   • Verify email (check spam folder)

3. Enable 2FA (Recommended)

   • Settings → Security → Enable 2FA
   • Scan QR code with authenticator app (Google Authenticator, Authy, etc.)

4. Add Cloud Credentials

   • Settings → Cloud Credentials
   • Add AWS, GCP, or Azure credentials
   • Credentials are encrypted at rest

5. Run Your First Scan

   • Dashboard → "Start Scan"
   • Select cloud provider
   • View real-time progress
   • Review findings and remediation steps

📚 Documentation

• Installation Guide
• User Manual
• API Documentation
• Developer Guide
• Troubleshooting
• FAQ

🎯 Roadmap

• AWS Support
• GCP Support
• Azure Support
• Windows Installer
• GTK3 Integration
• License System
• AI Chatbot
• Docker Image Release
• Scheduled Scanning
• Webhook Integrations
• Multi-User Organizations
• Custom Policy Engine
• API Access

For Security Teams

• 🔍 Continuous Monitoring: Automated security assessments
• 📊 Compliance Reporting: Generate audit-ready reports
• 🚨 Incident Response: Quickly identify misconfigurations
• 📈 Risk Management: Track security posture over time

For DevOps Engineers

• ⚡ Pre-Deployment Checks: Scan before going to production
• 🔄 CI/CD Integration: Automate security in pipelines
• 🛠️ Infrastructure Validation: Verify IaC configurations
• 📝 Documentation: Generate security documentation

For Compliance Officers

• ✅ Framework Mapping: Map findings to compliance requirements
• 📄 Audit Reports: Professional PDF reports for auditors
• 📊 Dashboard Views: Real-time compliance status
• 🔒 Evidence Collection: Document security controls

🎬 Screenshots & Demo

🏠 Main Dashboard - Security Overview

📊 Compliance Center - Framework Tracking

🔍 Security Scan Results

<img src="https://i.imgur.com/DXJduKK.png" alt