AWS Launched Continuum to Automate Vulnerability Testing

The rebranded security service aims to address the rising volume of software vulnerabilities by automating penetration testing and design reviews.

Updated on Sept. 22, 2026 in Cybersecurity

Bold vector editorial illustration of a vertical server enclosure in teal and slate tones, representing enterprise cybersecurity infrastructure. — Amazon Web Services has launched Continuum, an automated security service designed to accelerate vulnerability testing and threat modeling for software systems. AI Illustration. Upload story photo >

Live Poll

Do you trust that artificial intelligence tools can effectively secure business software against modern cyber threats?

Amazon Web Services has rebranded its AWS Security Agent as Continuum, a service now generally available for automated penetration testing. Additional features including threat modeling and code reviews are currently in preview.

Why it matters

As the monthly volume of publicly reported software vulnerabilities doubled to 10,000 between Q1 and Q3 2026, existing manual patch cadences have become insufficient. Continuum seeks to accelerate security assessments to match this increased threat pace.

LG CNS reported that utilizing the agent independently reduced testing time from five days to one day while cutting costs by 70%. Additionally, the firm increased assessment reliability from 60% to 90% by providing account permission data.

The players

Amazon Web Services

A cloud computing subsidiary of Amazon that provides a comprehensive suite of infrastructure, compute, and security services.

LG CNS

An IT service provider and subsidiary of LG Corp that specializes in system integration and infrastructure consulting.

HENNGE

A Japanese software company focused on cloud-based security and enterprise SaaS identity management.

The details

Continuum functions by examining system designs and software code for potential weaknesses. It also executes automated penetration tests—simulated cyberattacks on a computer system to identify exploitable flaws—to determine if identified vulnerabilities are accessible to malicious actors.

2025: 48,000 software vulnerabilities were reported publicly.
Q1 2026: Monthly vulnerability reports stood at approximately 5,000.
Q3 2026: Monthly vulnerability reports increased to approximately 10,000.
September 2026: AWS announced the launch of the Continuum service.

The Tech Race

This service represents an attempt by AWS to standardize automated security as the primary defense against the 2026 surge in monthly software vulnerability reports. It directly competes with traditional, manual penetration testing models that currently struggle to scale with modern release cadences.

Enterprise users can access automated penetration testing capabilities immediately, while threat modeling and design review features remain in preview. Organizations utilizing the service may see significant reductions in manual testing time by leveraging account-level permission data.

The takeaway

The transition to automated security testing is accelerating as organizations struggle to manage a 20% annual increase in reported software vulnerabilities. Watch for the public release of Continuum's code review and design modeling capabilities to gauge the platform's full impact on development lifecycles.