AWS launches Continuum, an AI service that verifies code flaws and writes fixes
AWS Continuum builds a context graph from customer repositories and infrastructure data, then tests exploits in a sandbox before proposing patches.
AWS launched AWS Continuum for code vulnerabilities on November 5, 2026, an AI-based service that detects vulnerabilities in customer code, checks whether they can actually be exploited, and generates fixes. The company announced the launch, reported by datanet.co.kr.
The service assembles a context graph from a customer's code repositories and AWS infrastructure information. Customers deploy collectors in the AWS accounts and regions where their code runs to gather AWS Config resource and network configuration data.
For vulnerabilities judged reproducible, Continuum runs attack code inside an isolated sandbox to confirm real exploitation, then produces proof-of-concept code and reproduction steps.
Remediation comes as code patches, dependency upgrades and configuration changes, delivered as pull requests to linked GitHub repositories. According to AWS, every fix is proposed by the service and applied only after a responsible person approves it.
Setup and availability
Users configure the service through the AWS console, connecting GitHub or Amazon S3 buckets as code sources and scheduling vulnerability scans. AWS Continuum is currently available in the US East (N. Virginia) and US West (Oregon) regions.
AWS said it plans to expand the service so that some fixes can be carried out automatically within guardrails defined by the customer.
Quick answers
What does AWS Continuum do?
It detects code vulnerabilities, verifies whether they are exploitable by running attack code in an isolated sandbox, and generates fixes delivered as pull requests to linked GitHub repositories.
Where is AWS Continuum available?
It is currently offered in the US East (N. Virginia) and US West (Oregon) regions.
Are fixes applied automatically?
No. Fixes are proposed by AWS Continuum and applied only after a responsible person approves them. AWS said it plans to allow some fixes to run automatically within customer-defined guardrails.