✨ New features to highlight in this version

Enjoy them all now for free at https://cloud.prowler.com

🤖 Lighthouse AI + MCP Server

This release introduces major improvements to Lighthouse AI, now powered by Prowler’s official MCP Server, significantly enhancing performance, reliability, and the quality of AI-driven interactions across the platform:

• Lighthouse AI now runs on the official MCP Server, providing a standardized and reliable foundation for AI interactions across Prowler.
• Improved Lighthouse AI architecture, delivering faster responses and a more consistent, structured output format.
• Smarter AI model selection for the OpenAI provider, automatically loading only chat-compatible models with tool-calling support to ensure a smoother experience.
• New MCP tools for Compliance Framework Management, enabling AI assistants to query compliance status across multiple frameworks and drill down to requirement-level details.
• AI-optimized MCP tool responses across Prowler Hub and Docs, with standardized formats designed for faster and more accurate natural language interactions.

Together, these improvements make Lighthouse AI more robust, scalable, and capable of delivering actionable security and compliance insights through natural language.

🔇 Simple Mutelist

Findings can be muted after scanning from the finding table. A new page is available in /mutelist where the user can handle simple and advanced Mutelist configuration.

🗂️ Category Overview & Filtering

We've introduced a powerful new way to analyze your security posture by category. A new endpoint provides an overview of categories based on finding severities, giving you instant visibility into how different security domains are performing across your environment. Additionally, both GET /findings and GET /findings/latest endpoints now support category filtering, making it easier to drill down into specific security domains.

📄 Enhanced PDF Reporting

PDF reports now include richer context with Account ID, Alias, and Provider Name directly in the reporting table. This makes exported reports more actionable and easier to share across teams, providing all the context needed without cross-referencing other sources.

⚡ Performance & Reliability Improvements

The GET /overviews/attack-surfaces endpoint has been streamlined by removing related check IDs from the response, improving performance and reducing payload size. Additionally, scheduled scan tasks now have a more reliable initialization with optimized execution timing.

🛡️ New AWS Security Categories

Two new AWS check categories have been added: privilege-escalation and ec2-imdsv1.
These categories improve visibility into high-risk misconfigurations, helping teams more easily identify paths to privilege escalation and legacy EC2 Instance Metadata Service v1 usage.

🔄 Updated AWS Service Metadata

Multiple AWS services have been migrated to the new service metadata format, including Glue, Kafka, KMS, MemoryDB, Inspector v2, Service Catalog, SNS, Trusted Advisor, and WAF (v1 and v2).
These updates improve consistency, accuracy, and long-term maintainability across AWS checks.

🧹 Data & Category Consistency Fixes

Several fixes improve correctness and normalization across providers:

• Corrected the trust-boundaries category naming.
• Fixed Bedrock Agent regional availability using official AWS documentation.
• Normalized region storage to lowercase for MongoDB Atlas and GCP Cloud Storage buckets.

UI

🚀 Added

• SSO and API Key link cards to Integrations page for better discoverability (#9570)
• Risk Radar component with category-based severity breakdown to Overview page (#9532)
• More extensive resource details (partition, details and metadata) within Findings detail and Resources detail view (#9515)
• Integrated Prowler MCP server with Lighthouse AI for dynamic tool execution (#9255)
• Implement "MuteList Simple" feature allowing users to mute findings directly from the findings table with checkbox selection, and a new dedicated /mutelist route with Simple (mute rules list) and Advanced (YAML config) tabs. (#9577)

🔄 Changed

• Lighthouse AI markdown rendering with strict markdownlint compliance and nested list styling (#9586)
• Lighthouse AI default model updated from gpt-4o to gpt-5.2 (#9586)
• Lighthouse AI destructive MCP tools blocked from LLM access (delete, trigger scan, etc.) (#9586)

🐞 Fixed

• Lighthouse AI angle-bracket placeholders now render correctly in chat messages (#9586)
• Lighthouse AI recommended model badge contrast improved (#9586)

API

🚀 Added

• New endpoint to retrieve and overview of the categories based on finding severities (#9529)
• Endpoints GET /findings and GET /findings/latests can now use the category filter (#9529)
• Account id, alias and provider name to PDF reporting table (#9574)

🔄 Changed

• Endpoint GET /overviews/attack-surfaces no longer returns the related check IDs (#9529)
• OpenAI provider to only load chat-compatible models with tool calling support (#9523)
• Increased execution delay for the first scheduled scan tasks to 5 seconds(#9558)

🐞 Fixed

• Made scan_id a required filter in the compliance overview endpoint (#9560)
• Reduced unnecessary UPDATE resources operations by only saving when tag mappings change, lowering write load during scans (#9569)

SDK

🚀 Added

• privilege-escalation and ec2-imdsv1 categories for AWS checks (#9537)
• Supported IaC formats and scanner documentation for the IaC provider (#9553)

🔄 Changed

• Update AWS Glue service metadata to new format (#9258)
• Update AWS Kafka service metadata to new format (#9261)
• Update AWS KMS service metadata to new format (#9263)
• Update AWS MemoryDB service metadata to new format (#9266)
• Update AWS Inspector v2 service metadata to new format (#9260)
• Update AWS Service Catalog service metadata to new format (#9410)
• Update AWS SNS service metadata to new format (#9428)
• Update AWS Trusted Advisor service metadata to new format (#9435)
• Update AWS WAF service metadata to new format (#9480)
• Update AWS WAF v2 service metadata to new format (#9481)

🐞 Fixed

• Fix typo trustboundaries category to trust-boundaries (#9536)
• Fix incorrect bedrock-agent regional availability, now using official AWS docs instead of copying from bedrock
• Store MongoDB Atlas provider regions as lowercase (#9554)
• Store GCP Cloud Storage bucket regions as lowercase (#9567)

MCP

🚀 Added

• Add new MCP Server tools for Prowler Compliance Framework Management (#9568)

🔄 Changed

• Update API base URL environment variable to include complete path (#9542)
• Standardize Prowler Hub and Docs tools format for AI optimization (#9578)