Prowler January 2026 Newsletter

Prowler January 2026 Newsletter

This is a republishing of our monthly newsletter.

Hi everyone ๐Ÿ‘‹

Happy New Year! It's been a busy few weeks for the Prowler team - we closed out 2025 and kicked off 2026 with two major releases packed with new cloud providers, AI-powered capabilities, attack path visualization, and much more. Plus, we're heading to San Francisco for BSidesSF and RSA Conference - come say hello!

Here's what's new in January! ๐Ÿ‘‡

๐Ÿ†• Attack Paths

Visualize Attack Vectors

Introducing Attack Paths, powered by Cartography and a graph database, enables you to visualize and analyze potential attack vectors. Execute graph-based queries, identify privilege escalation paths and lateral movement risks, and prioritize remediation based on actual exploitability.

๐Ÿ—‚๏ธ Resource Inventory

Get aggregated views of your cloud resources organized by security-relevant categories such as Compute, Storage, Network, Identity, giving instant visibility into your cloud deployments and making it easy to spot resource categories that need immediate attention.

โ˜๏ธ New Cloud Providers: Alibaba Cloud & Cloudflare

Alibaba Cloud now has full UI and API support with 63 checks. Cloudflare joins as a new CLI provider covering TLS/SSL, DNS, email security (SPF, DKIM, DMARC), WAF, bot protection, and more.

๐Ÿ‘‰ Explore Alibaba Cloud checks โ†’ | Explore Cloudflare checks โ†’

๐Ÿ›๏ธ AWS European Sovereign Cloud

Full support for AWS European Sovereign Cloud regions, enabling organizations with strict data residency requirements to leverage Prowler's security scanning capabilities.

๐Ÿ‘‰ Read more about AWS EUSC with Prowler โ†’

๐Ÿ“‹ Compliance Watchlist & ThreatScore Breakdown

A new Compliance Watchlist on the Overview page lets you monitor your most critical compliance frameworks at a glance. Plus, the Compliance Summary page now includes a detailed ThreatScore contributing categories breakdown showing how Identity, Data Protection, Network Security, and other pillars contribute to your overall risk score.

๐Ÿ“š New Compliance Frameworks

  • CIS 5.0 for Azure
  • CIS 6.0 for Microsoft 365
  • CIS 1.12 for Kubernetes

๐Ÿ“Š Redesigned Findings Table

The findings table has been completely rebuilt with improved filtering UX, enhanced table interactions, cleaner visual hierarchy, and better integration with resource group filters.

๐Ÿค– Lighthouse AI + MCP Server

Smarter AI-Driven Security Insights

Lighthouse AI is now powered by Prowler's official MCP Server, delivering faster responses, smarter model selection, and new compliance framework management tools, all through natural language. Together, these improvements make Lighthouse AI more robust, scalable, and capable of delivering actionable security and compliance insights.

๐Ÿ”‡ Simple Mutelist

Mute findings directly from the findings table with a single click. A new dedicated /mutelist page gives you both simple mute rules and advanced YAML configuration in one place.

๐Ÿ“„ Enhanced PDF Reporting

PDF reports now include Account ID, Alias, and Provider Name directly in the reporting table, making exported reports more actionable and easier to share across teams.

๐Ÿ—‚๏ธ Category Overview & Filtering

A powerful new way to analyze your security posture by category with severity-based overviews and new filtering on findings endpoints.

๐Ÿš€ Try It Free on Prowler Cloud

๐Ÿ“ Meet Prowler at Upcoming Events

We're heading to San Francisco this spring! Come meet the team, see live demos, and get hands-on with Prowler.

BSidesSF 2026

March 21-22, 2026 ยท City View at the Metreon, San Francisco

Prowler is a Platinum sponsor of Cloud Village at BSides SF. Complete our CTFs, and get guided, practical experience running cloud security scans and analyzing findings with Prowler.

๐Ÿ‘‰ Learn more โ†’

RSA Conference 2026

March 23-26, 2026 ยท Moscone Center, San Francisco

Meet the Prowler team at the Early Stage Expo, Booth #42. Come see live demos, talk cloud security strategy, and learn how Prowler can secure your multi-cloud environment.

๐Ÿ‘‰ Learn more โ†’

โšก That's a Wrap

Thank you for being part of the growing Prowler community.

Stay secure, and we look forward to seeing you at the next Prowler community event!
- The Prowler Team