AWS Security Agent adds Kiro Power, Claude Code, simulated validations and new integrations support
AWS Security Agent (now part of AWS Continuum) adds support for Kiro and Claude Code, enabling developers to trigger security scans directly from their development environment. AWS Security Agent now also validates code scanner findings by simulating exploits in a sandbox environment and providing proof of exploit, so teams can trust their results, minimize false positives, and prioritize remediation with confidence. Additionally, this release adds integrations with GitLab.com, GitLab Self Managed, GitHub Enterprise, Bitbucket, and Confluence. With simulated validations, the code scanner goes
The increasing sophistication of software supply chain attacks and the rapid integration of AI into development workflows necessitate more robust, automated security measures that can keep pace with innovation.
This development allows for earlier and more trustworthy detection of vulnerabilities, reducing the attack surface for software developed in the cloud and accelerating secure software development lifecycles.
Cloud-native application development becomes inherently more secure through integrated, AI-powered scanning and validation, shifting security left into the developer's environment with higher confidence in findings.
- · AWS
- · DevOps teams
- · Organizations using AWS developers
- · Cybersecurity industry
- · Malicious actors targeting software supply chains
- · Vulnerability exploit brokers
Developers will gain access to more reliable security feedback within their existing workflows, improving code quality and security posture.
The reduced incidence of false positives and validated exploits will streamline remediation efforts, potentially reducing development costs and time-to-market.
This could set a new industry standard for integrated, AI-driven security validation in cloud development, influencing other cloud providers and security tool vendors to adopt similar capabilities.
This signal links to a primary source. Continuum Brief monitors and indexes it as part of the live intelligence stream — we do not republish source content.
Read at AWS What's New