AWS unveils Continuum, an AI-native 'security at machine speed' platform
AWS introduced Continuum at its New York Summit, an AI-native security service it frames as 'security at machine speed.' The pitch is a departure from the traditional security model of collecting telemetry, storing it, querying it, and surfacing it on dashboards for humans to interpret. Instead, Continuum continuously discovers, prioritizes, validates, and remediates security risks—combining telemetry and context with reasoning and autonomous action to keep pace with modern threats that move faster than human analysts can respond.
Alongside Continuum, AWS expanded its Security Agent with STRIDE-based threat modeling (a structured methodology for identifying spoofing, tampering, repudiation, information disclosure, denial of service, and elevation-of-privilege risks), full repository and pull-request scanning with remediation across major Git platforms, and IDE integrations via 'Kiro power,' a Claude Code plugin, and MCP. The goal is to let developers run security reviews without leaving their workflow or context-switching.
The announcements fit AWS's broader Summit theme of pushing autonomous agents into every enterprise function—here, applying agentic reasoning to the security domain specifically. By embedding security into the development loop (PR scans, threat modeling, IDE plugins) rather than bolting it on afterward, AWS targets the 'shift-left' security trend while adding autonomous remediation.
The timing is pointed: this same week, a disclosed attack turned Microsoft 365 Copilot into a one-click data-theft tool, and Backslash Security documented Anthropic patching dozens of Claude Code vulnerabilities in weeks. Agentic AI is rapidly expanding the attack surface, making AI-native security tooling both timely and necessary. The skeptical question is whether autonomous remediation can be trusted to act on production systems without introducing its own failures. Watch for real-world detection rates, false-positive handling, and how 'autonomous action' is bounded in practice.
