AWS says AI agents lack business context and security, launches two services to patch the gaps
At its summit in New York, AWS unveiled two new services. Continuum automatically detects, prioritizes, and fixes code vulnerabilities.
The announcements centered on two new services. AWS Continuum tackles security vulnerabilities in code. AWS Context serves as a shared knowledge base for agents. Both address typical bottlenecks when deploying AI agents in production. Agents lack business context, and security risks can’t keep up with the pace of AI-generated code.Ad Automating security as AI-powered threats outpace traditional defenses With AWS Continuum, AWS is launching a service that covers the full lifecycle of code vulnerabilities, from detection and prioritization to validation and recommended fixes. The service is initially available only to select pilot customers.AdDEC_D_Incontent-1 AWS points to specialized security models like Anthropic’s Claude Mythos as the driving force, writing in its security blog that such models can spot vulnerabilities and map out attack paths faster than defenders can respond. Traditional approaches built around data collection, storage, and dashboards weren’t designed for that kind of speed, and the backlog of unresolved issues keeps piling up. Continuum takes the existing list of open vulnerabilities and also scans for new ones on its own. Then it ranks findings based on business context. Is the affected component even reachable? Is it actively used in production?Ad During validation, the service tries to replicate a successful attack in an isolated test environment to separate false positives from real risks. Only then does it suggest specific countermeasures like a modified network config, an adjusted permission setting, or a code patch. Continuum picks different frontier models depending on the task. The service can increasingly automate how code vulnerabilities are handled, but it starts in a learning mode that requires human sign-off. As confidence builds, teams can switch it to an enforcement mode where it applies defined fixes on its own.
