LoginSign Up
← Back to all sparks
P

Prowler

INFRA · APIS
Velocity5.0

Open-source cloud security assessment and compliance platform

prowler.com ↗

Prowler 5.46 groups scan findings into issues and extends AI checks to Bedrock and Vertex.

cloud-securitycomplianceai-securitycspmopen-core
◆Current state
Prowler ships a minor release every one to two weeks. 5.46.0 adds an Issues page to Prowler Cloud that groups a scan's findings into issues with a verdict, new AWS Bedrock, Cognito and WAFv2 checks, a five-check Vertex AI Workbench service on GCP, and checks for PHP runtimes left exposed by the PHP2Shell CVEs across AWS, GCP and Azure. Google Workspace checks now account for the tenant's edition and read the policy Google actually applies.
◆Where it's heading
The open-source engine keeps absorbing coverage where risk is moving: hosted AI services first on Azure in 5.45, now on AWS and GCP, plus fast responses to named CVEs. The paid cloud product keeps adding triage layers on top, from AI fixes per finding to issue grouping, making the free CLI the data source and Prowler Cloud the place findings get worked.
◆Prediction
Expect AI-service coverage to keep widening across providers and further Prowler Cloud triage features built on the new issue grouping.

◆Recent moves

  1. 2d ago

    Prowler 5.46 adds Issues view and Bedrock/Vertex AI checks

    Follows 5.45's Azure AI checks with Bedrock guardrail and invocation-logging checks on AWS and Vertex AI Workbench checks on GCP, as the 5.45 pattern suggested. The Prowler Cloud Issues page, which groups findings into verdict-bearing issues, continues the paid tier's move into triage. PHP2Shell runtime checks show the team turning named CVEs into checks within a release.

    View source ↗
  2. 14d ago

    Prowler 5.45 adds Azure AI Services and Entra ID checks

    5.45.0 adds nine Azure AI Services checks, including Prompt Shields on model deployments, five Entra ID checks and home-region support for OCI tenancies. Auditing hosted AI accounts is a natural extension of the coverage push, and the first entry in this window aimed at AI infrastructure itself.

    View source ↗
  3. 1mo ago

    Prowler 5.44.0

    A fixed resource can now be re-checked with a partial scan instead of waiting for the next full run. It shortens the remediation loop, and it is subscription-only, like the other recent workflow features.

    View source ↗
  4. 1mo ago

    Prowler 5.43.0

    The FedRAMP 20x pilot frameworks are replaced by two universal 2026 frameworks covering five platforms from one definition, 46 KSIs plus 158 Class C rules. It deepens Prowler's position in US federal compliance.

    View source ↗
  5. 1mo ago

    Prowler 5.42.0

    AWS ISO partitions are now resolved from bundled metadata, so air-gapped classified regions scan without hand-edited region files. It pairs with FedRAMP as regulated-environment coverage.

    View source ↗
  6. 1mo ago

    Prowler 5.41.0

    CLI and CI findings can now be dragged into Prowler Cloud as OCSF reports. This connects the free scanner to the paid triage UI.

    View source ↗