AWS has made Continuum for code vulnerabilities generally available. The service is designed to help security teams find code vulnerabilities, check whether they can be exploited, rank them by business impact and offer fixes through pull requests in developer workflows.
AWS says Continuum builds a context graph of an AWS environment, including how resources, identities and network connections relate. It can ingest existing vulnerability findings and scan code, then test findings in an isolated sandbox to check which are exploitable. Its proposed pull requests include evidence of exploitability and an assessment of the potential blast radius, or how far an issue could spread.
A review-first path to automation
Continuum chooses an AI model for each task, according to AWS. It starts in Learn mode, where it proposes fixes for a person to approve. AWS says customers can move to Enforce mode once they trust the service’s precision, allowing it to act autonomously within guardrails they set. The announcement does not define a precision threshold or explain what guardrails are available.
AWS says Continuum works alongside Amazon GuardDuty and AWS Security Hub. Its announcement points to a regional availability table, but does not list the available regions in the supplied information. It also gives no pricing, details on supported programming languages, or independent performance results.
Why it matters
For teams that already use AWS security services, Continuum could put proposed code fixes into developer workflows and let them review changes before enabling more automation. AWS does not specify the regions, prices or languages supported in this announcement, so teams cannot tell from it alone whether the service is available or suitable for their setup.
