AWS unveils Continuum AI-powered vulnerability management platform

At AWS Summit New York, AWS introduced Continuum, an AI-native security service designed to discover, prioritize, validate, and remediate code vulnerabilities at machine speed. Rather than just flagging issues, Continuum aims to close the loop autonomously — validating that a flaw is real and exploitable before proposing or applying a fix, addressing the alert-fatigue problem that plagues traditional vulnerability scanners.

The timing is pointed: the launch coincides with the week's 'sleeper agent' fears about Chinese models emitting vulnerable code and the Anthropic jailbreak that bypassed cybersecurity safeguards. AWS is positioning Continuum as the defensive counterpart to the security risks AI itself introduces, integrating with its Kiro CLI security-investigation tooling that automates correlation across GuardDuty, CloudTrail, and other services.

Separately, AWS is playing a longer game: Amazon AI executive Peter DeSantis told CNBC he expects the first commercially useful small-scale quantum computers within five-to-seven years, framing Amazon's quantum investments as a strategy to 'own every significant enterprise computing shift before customers have a simple alternative' — a moat to outlast the AI boom itself, targeting pharma, chemical, energy, and financial customers.

Competitively, Continuum slots into a crowded AI-security market against startups and incumbents, but AWS's distribution advantage is significant. Watch next: independent validation of Continuum's remediation accuracy (false fixes are worse than false alerts), and whether the quantum timeline holds against perennial overpromising in that field.