AWS Continuum brings continuous AI penetration testing into CI/CD pipelines

AWS has rebranded AWS Security Agent as AWS Continuum and launched Continuum for Penetration Testing in public preview. It integrates penetration testing directly into CI/CD pipelines so every change can be probed, rather than relying on periodic manual engagements.

AWS positions Continuum as autonomous code security: it investigates findings, reproduces them, and proposes repairs. The rationale is that AI-driven vulnerability discovery now outpaces traditional security processes, so defenses must also be automated.

The launch fits the week's cyber theme: Gemini 4 Argon gated to defenders for its vulnerability-finding power, and AWS showcasing GLM 5.3 with the Strix security agent. Offensive and defensive capability are both scaling.

The counterpoint comes from open-source maintainers: Linux kernel developers backed Greg Kroah-Hartman's pushback against automated LLM security audits, citing hallucinated vulnerabilities. Continuum's value depends on false-positive rates, which the preview should reveal.