# AWS Continuum for Code Vulnerabilities reaches general availability

> AWS says Continuum can test vulnerability findings in an isolated sandbox and propose code fixes as pull requests. Region details and pricing aren’t included in the announcement.

Oossa · 2026-10-22 · https://oossa.com/en/aws-continuum-for-code-vulnerabilities-reaches-general-availability

AWS has made Continuum for code vulnerabilities generally available. The service is designed to help security teams find code vulnerabilities, check whether they can be exploited, rank them by business impact and offer fixes through pull requests in developer workflows.

AWS says Continuum builds a context graph of an AWS environment, including how resources, identities and network connections relate. It can ingest existing vulnerability findings and scan code, then test findings in an isolated sandbox to check which are exploitable. Its proposed pull requests include evidence of exploitability and an assessment of the potential blast radius, or how far an issue could spread.

## A review-first path to automation

Continuum chooses an AI model for each task, according to AWS. It starts in Learn mode, where it proposes fixes for a person to approve. AWS says customers can move to Enforce mode once they trust the service’s precision, allowing it to act autonomously within guardrails they set. The announcement does not define a precision threshold or explain what guardrails are available.

AWS says Continuum works alongside Amazon GuardDuty and AWS Security Hub. Its announcement points to a regional availability table, but does not list the available regions in the supplied information. It also gives no pricing, details on supported programming languages, or independent performance results.

## The facts

- AWS announced general availability of Continuum for code vulnerabilities.
- The service can ingest existing vulnerability findings, scan code and test findings in an isolated sandbox, according to AWS.
- Proposed remediation pull requests include exploitability proof and a blast-radius assessment.
- Continuum starts in Learn mode, where people approve proposed fixes; Enforce mode allows autonomous action within customer-set guardrails.
- AWS says the service works alongside Amazon GuardDuty and AWS Security Hub.

## Why it matters

For teams that already use AWS security services, Continuum could put proposed code fixes into developer workflows and let them review changes before enabling more automation. AWS does not specify the regions, prices or languages supported in this announcement, so teams cannot tell from it alone whether the service is available or suitable for their setup.

## Sources & references

1. [AWS Continuum for code vulnerabilities is now generally available](https://aws.amazon.com/about-aws/whats-new/2026/10/aws-continuum-for-code-vulnerabilities-is-now-generally-available) – AWS, 2026-10-22

Last updated: 2026-10-22