Prowler Academy

Module 21: Lighthouse AI & Custom Compliance

Track 4 · Advanced features · Time: ~1h 15 min · Pass: 8/10

Scenario

Cloudsmiths' GRC analyst is overwhelmed. They need an AI assistant that can answer questions like "Which AWS accounts fail PCI-DSS 3.4?" without writing SQL. They also need a custom compliance framework that combines Cloudsmiths' internal control catalog with CIS, because their controls live half-inside and half-outside off-the-shelf frameworks.

Learning objectives

  1. Set up Lighthouse AI with a supported LLM provider and a tool-calling model.
  2. Use Lighthouse AI to triage findings, run Attack Paths, draft remediation.
  3. Configure multiple LLM providers (OpenAI, Amazon Bedrock, OpenAI-compatible endpoints).
  4. Build a custom compliance mapping.

Register to read the full module

The syllabus and each module overview are public. Create a free account to unlock the full lessons, labs, knowledge checks and the final exam, and to track your progress.