October 2025 Summaries

Prowler, a cloud security tool, has adapted to Microsoft's enforcement of multi-factor authentication (MFA) for Microsoft 365 by introducing a new certificate-based authentication method. Originally, Prowler supported Microsoft 365 through Service Principal authentication, later expanding to include username and password methods via PowerShell modules. However, with Microsoft's policy change blocking non-interactive access for user credential sign-ins, Prowler deprecated the older method and enhanced its Service Principal authentication to eliminate the need for user credentials. The new version 5.13 now features certificate-based authentication as a secure alternative, which involves creating a self-signed certificate, uploading it to Microsoft Entra, and providing an encoded credential in Prowler Cloud to maintain full Microsoft 365 functionality, thereby enhancing security against account compromise attempts.

Prowler MCP is a versatile security tool designed to streamline the process of identifying and addressing security vulnerabilities in cloud environments. By integrating with platforms like Claude Desktop and Claude Code, it enables users to interact with security findings and automate remediation tasks, such as creating Jira tickets for issues like the lack of mandatory MFA in a GitHub organization. Prowler MCP allows for efficient workflow management by enabling quick transitions from detection to resolution without changing tools, and it can be used to check code for security issues, such as overly permissive AWS IAM roles, and suggest fixes. The tool’s capabilities extend to creating custom dashboards and using Lighthouse AI in Prowler Cloud, offering intelligent security solutions with minimal setup. The tool emphasizes the importance of reducing the time and complexity between finding and fixing security issues, thereby enhancing overall security posture.

Prowler has announced the end-of-life for its legacy SaaS platform, which only supported AWS Cloud, as it transitions users to the new Prowler Cloud platform. Released in December 2024, Prowler Cloud offers enhanced scalability, performance, and multi-cloud integration, alongside new compliance frameworks, and will replace the legacy platform by December 31, 2025. While the legacy service will remain in read-only mode until the end-of-life date, allowing users access to historical findings, features like scans and integrations will be disabled. Migration to Prowler Cloud includes the automatic transfer of organization and user accounts, meeting specific criteria, and AWS accounts, but users need to reconfigure certain integrations, such as SAML SSO and Amazon S3 credentials. Users ineligible for automatic migration are encouraged to contact support, and the migration aims to ensure a seamless transition for continued cloud security operations.