November 2025 Summaries

Prowler has introduced Infrastructure as Code (IaC) scanning capabilities in its Prowler Cloud platform, allowing users to detect and address security misconfigurations in code before they reach production, thereby saving time and reducing potential exploitation risks. Previously, Prowler's capabilities were limited to runtime environments, but with the integration of Trivy, it now supports scanning popular IaC files such as Docker, Kubernetes, Terraform, and CloudFormation. The platform offers unified visibility by presenting IaC findings in the same format as runtime findings, linking directly to the specific file and line of code where issues are detected. This advancement is part of Prowler's broader strategy to enhance security throughout the Software Development Life Cycle (SDLC) and is positioned as a tool for consolidating security management across both runtime and code environments.

Prowler, a leading open-source cloud security platform, has launched ProwlerLighthouse AI and MCP Server, marking a significant advancement in integrating artificial intelligence into DevSecOps workflows. This launch introduces autonomous AI capabilities that enhance risk analysis, streamline compliance, and expedite remediation processes across multi-cloud environments. By embedding AI into security workflows, Prowler enables proactive detection and remediation, reducing dwell time and preventing breaches. The MCP Server integrates seamlessly with popular development tools, allowing for real-time security management within coding environments. Additionally, Lighthouse AI offers a natural language chat interface for querying complex security data, supporting multiple Large Language Models (LLMs) to optimize performance and prevent vendor lock-in. The platform's open-source nature ensures cost-effectiveness and accessibility, reinforcing Prowler's role as a leader in cloud security innovation.