May 2026 Summaries

The Prowler plugin for Claude Code automates the challenging manual processes involved in cloud security triage, effectively acting as a harness that integrates structured context into security workflows. This tool aids in identifying misconfigurations, prioritizing them based on real impact, and managing remediation efforts through methods such as opening pull requests and tracking progress in markdown reports within repositories. By bundling the Prowler MCP server and a specific skill for compliance triage, it enables users to streamline their cloud security processes by leveraging detailed contextual data, compliance frameworks, and structured findings, all while ensuring transparency and auditability. The plugin's design focuses on providing credible context and safe controls to automate triage tasks, distinguishing it from tools that make uninformed guesses. This automation addresses the bottleneck in cloud security management, which is not detection, but the labor-intensive steps between discovery and resolution, thus allowing security teams to focus on more strategic tasks.

Prowler’s May 2026 newsletter announces a series of cloud-security platform updates, including an Alerts system that delivers daily critical-finding digests and configurable notifications, plus support for Vercel with 26 security checks covering deployments, domains, projects, and team settings. The company also released an official GitHub Action that integrates findings with GitHub Code Scanning through SARIF, expanded CI/CD workflow scanning for supply-chain risks, and added SARIF output for infrastructure-as-code scans of Terraform, CloudFormation, and Kubernetes. New security coverage includes AWS Bedrock hardening checks, CIS-aligned Google Workspace Gmail controls, additional Microsoft Entra Conditional Access, Intune, and Exchange checks, and an AWS mapping for the Australian Signals Directorate Essential Eight framework. Product interface improvements focus on faster investigation and remediation through redesigned finding, resource, attack-path, and compliance views, while smaller enhancements include syntax-highlighted remediation guidance, AWS region exclusions, authoritative remediation links, and downloadable OCSF reports. Prowler also plans to attend fwd:cloudsec in Bellevue, AWS Summit Madrid, and AWS Summit NYC in June 2026.