AWS Continuum Launches to Automate Vulnerability Fixes

The new service prioritizes exploitable flaws in code repositories to address a rising trend in failed software patches.

Updated on Oct. 22, 2026 in Cybersecurity

Isometric editorial illustration of a metallic geometric lattice structure, representing an automated system for securing cloud infrastructure. — Amazon Web Services launched AWS Continuum, an enterprise service using AI to identify and automate fixes for exploitable security vulnerabilities in code. AI Illustration. Upload story photo >

Live Poll

Do you trust automated tools to manage your organization's security patching process?

Amazon Web Services has launched AWS Continuum, a service designed to identify and propose fixes for exploitable vulnerabilities in customer code. The service uses frontier AI to analyze repository and cloud environment data, currently available in two U.S. regions.

Why it matters

The service aims to reduce developer alert fatigue by filtering for vulnerabilities that are actually reachable and exploitable, a critical capability as attackers increasingly use AI to accelerate the weaponization of disclosed security flaws.

AWS Continuum analyzes integrated GitHub repositories and S3 buckets to build context graphs, testing potential exploits in isolated sandboxes to provide proof-of-concept evidence. The service ranks issues by business impact and generates proposed pull requests, which currently require human approval.

The players

Amazon Web Services

A subsidiary of Amazon providing on-demand cloud computing platforms and APIs to individuals, companies, and governments.

Terra Security

A cybersecurity research firm that tracks developer workflows and vulnerability remediation outcomes.

The details

AWS Continuum builds a context graph—a visual map of relationships between code, infrastructure, and access permissions—using data from integrated GitHub repositories and AWS Config resources. To test for exploitability, the service runs code in an isolated sandbox to confirm if a vulnerability can be triggered. By integrating this environmental data, the tool produces a blast radius assessment, helping engineers prioritize patches that pose the highest risk to their specific architecture.

October 20, 2026: AWS Continuum for code vulnerabilities went live in the U.S.
October 5, 2026: AWS launched continuous penetration testing into public preview.

The Tech Race

The launch follows the October 5, 2026 preview of AWS continuous penetration testing, signaling a shift toward autonomous security remediation. This development places AWS in direct competition with security tooling vendors aiming to automate patch verification to mitigate the rising rate of failed fixes.

Developers can now access the service in the US East and US West regions, with pricing structured as a monthly context fee alongside a usage-based inference charge. While currently requiring manual approval for every pull request, the platform is expected to eventually support authorized automated fix deployment.

The takeaway

AWS Continuum represents a shift toward context-aware security remediation that attempts to solve the problem of ineffective automated patches. Security teams should monitor future updates for the introduction of automated fix authorization, which will require establishing strict confidence gates for test coverage.