● Covered by 4 sources · 4 reportsMedium impact4 neutral
AWS Continuum Integrates AI-Powered Penetration Testing into CI/CD Pipelines
Key points
- AWS Continuum offers AI-powered penetration testing.
- Tests are scoped to recent code changes for efficiency.
- Integrates as a post-deployment gate in CI/CD pipelines.
- Supports GitHub Actions, GitLab CI/CD, Bitbucket, Azure DevOps.
- AWS Continuum is now generally available.
- The service provides automated fixes or pull requests for vulnerabilities.
- AWS Continuum prioritizes issues by business impact.
- It confirms which findings are exploitable in your environment.
- Remediations require human approval before shipping.
- AWS Continuum achieved an 89% end-to-end success rate on the CyberGym-E2E benchmark.
- AWS Continuum outperformed previous AI agents, which had a public high of 65.9% on the CyberGym-E2E benchmark.
- AWS Continuum was made generally available on Thursday.
- The 89% benchmark claim was published on October 5.
- AWS Continuum is available in US East (N. Virginia) and US West (Oregon).
- AWS Continuum was made generally available four months after its preview announcement.
- AWS Continuum charges by the finding and by the codebase.
- Esra Kayabali is a principal solutions architect.
- Swami Sivasubramanian is VP of Agentic AI.
- Christopher Rae leads AI security go-to-market at AWS.
AWS Continuum for Penetration Testing
AWS Continuum, previously known as AWS Security Agent, is a service that utilizes AI agents to identify and confirm exploitable vulnerabilities in running applications. This service is designed to integrate into CI/CD pipelines as a post-deployment gate.
Integration into CI/CD Pipelines
The service allows for penetration tests to run on every deployment. It can block promotion to production if a finding meets or exceeds a user-defined severity threshold. This integration is supported across major CI/CD platforms including GitHub Actions, GitLab CI/CD, Bitbucket Pipelines, and Azure DevOps Pipelines.
The CI/CD pipeline deploys changes to a staging environment, then the Continuum gate authenticates to the AWS account via OpenID Connect (OIDC) to initiate a scoped penetration test. The gate waits for results and reports the outcome back to the pipeline, conditionally blocking further promotion.
Scoped Testing for Efficiency
A key feature is the ability to scope each test to only the changes deployed since the last successful gate run. Continuum determines the commit range (head being the current commit, base being the last cleared commit) and tests only that specific change. This targeted approach makes the testing process fast and economical enough to run with every deployment.
Server-Side Execution
All penetration testing runs server-side within the user's AWS account. This means no penetration testing logic executes on the CI/CD runner itself, maintaining separation and security.
Updates
- AWS Continuum is available in US East (N. Virginia) and US West (Oregon).
- AWS Continuum was made generally available four months after its preview announcement.
- AWS Continuum charges by the finding and by the codebase.
- Esra Kayabali is a principal solutions architect.
- Swami Sivasubramanian is VP of Agentic AI.
- Christopher Rae leads AI security go-to-market at AWS.
- AWS Continuum achieved an 89% end-to-end success rate on the CyberGym-E2E benchmark.
- AWS Continuum outperformed previous AI agents, which had a public high of 65.9% on the CyberGym-E2E benchmark.
- AWS Continuum was made generally available on Thursday.
- The 89% benchmark claim was published on October 5.
- AWS Continuum is now generally available.
- The service provides automated fixes or pull requests for vulnerabilities.
- AWS Continuum prioritizes issues by business impact.
- It confirms which findings are exploitable in your environment.
- Remediations require human approval before shipping.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
AWS has made Continuum for code vulnerabilities generally available in US East (N. Virginia) and US West (Oregon), four months after its preview announcement. This service identifies and validates code vulnerabilities, then provides fixes as patches or pull requests, building a context graph from repositories and the AWS environment. Continuum addresses the volume of security findings by validating which vulnerabilities are exploitable through isolated sandbox testing, providing proof-of-concept code and reproduction steps.
AWS has made Continuum for code vulnerabilities generally available, a service that identifies and fixes bugs in code repositories. The company claims Continuum achieved an 89% end-to-end success rate on the CyberGym-E2E benchmark, outperforming previous AI agents.
AWS Continuum for code vulnerabilities is now generally available. This security service identifies and validates code vulnerabilities, then provides automated fixes or pull requests, prioritizing issues by business impact and confirming exploitability.
AWS Continuum, formerly AWS Security Agent, now provides AI-driven penetration testing that integrates directly into CI/CD pipelines. This service automatically scopes tests to recent code changes, allowing for penetration testing on every deployment and blocking promotion to production based on severity thresholds.