June 2026 Summaries

Prowler Cloud provides a comprehensive compliance framework for the Digital Operational Resilience Act (DORA), which became mandatory in the EU for financial services entities in January 2025. This regulation encompasses various areas including governance, incident reporting, resilience testing, third-party risk, and information sharing. Prowler maps DORA's technical requirements to continuous cloud configuration checks, primarily focusing on AWS, to assess compliance with the regulation's ICT demands. The framework organizes these checks into DORA's five pillars and underlying articles, allowing users to perform automated scans that produce evidence-based reports for auditors. It simplifies ongoing compliance by automating the mapping of cloud settings to DORA's requirements, offering users real-time insights into their compliance status. Although it currently covers AWS, the framework is designed to expand to other cloud providers like Azure and GCP. Prowler's approach helps organizations maintain a continuous compliance posture by facilitating immediate assessments and historical evidence of adherence to DORA's technical controls.