AWS Continuum brings penetration testing into every CI/CD deployment

Traditional pen tests happen quarterly or yearly, leaving long windows in which newly shipped code goes untested. Continuum moves exploit validation into the pipeline, attempting real exploitation against each deployment. The aim is to cut noise from static scanners, which often bury teams in unexploitable findings.

AWS also shipped a cluster of agent-focused updates this week. Tamnoon reported its Bedrock-based remediation agent cut critical cloud exposure by more than 90% in 90 days. SageMaker Studio added Google, GitHub and Apple sign-in requiring no AWS account. Amazon S3 and S3 Vectors arrived on Vercel Marketplace and v0. Bedrock expanded GPT-6 Sol and Luna to five Asia Pacific regions.

Competitively, continuous automated pen testing has been a startup category (Horizon3, Pentera and AI-native players). AWS integrating it natively threatens those vendors much as GuardDuty did for earlier tools.

Watch pricing, coverage limits, and how safely live exploitation runs against production-adjacent environments.