llms.blog
AWS

AWS Puts Continuum Security Scanning Into Claude Code, Codex, and Kiro

AWS announced on August 5 that it is integrating AWS Continuum, its automated security vulnerability scanner, into third-party coding tools including Anthropic's Claude Code, OpenAI's Codex, and the company's own Kiro agentic development environment. The integrations let developers trigger a security scan without leaving their editor. Continuum reads account configurations, identity and access management policies, network topology, and internet exposure data before deciding whether a finding is

axc
axc
2 min
AWS Puts Continuum Security Scanning Into Claude Code, Codex, and Kiro

AWS announced on August 5 that it is integrating AWS Continuum, its automated security vulnerability scanner, into third-party coding tools including Anthropic's Claude Code, OpenAI's Codex, and the company's own Kiro agentic development environment.

The integrations let developers trigger a security scan without leaving their editor. Continuum reads account configurations, identity and access management policies, network topology, and internet exposure data before deciding whether a finding is worth a developer's attention. A vulnerability in code that never reaches production is ranked below one on a public-facing path.

Agent-team loop

AWS uses what it calls an agent-team loop -- an orchestration layer that selects a model per task and manages connections into customer accounts. The service also builds a working exploit in a sandbox to confirm findings are genuine, which it uses to filter out false positives.

Chet Kapoor, AWS vice president of search, security and observability, wrote that frontier models have become proficient enough at spotting flaws that the bottleneck has shifted from detection to the surrounding infrastructure that acts on findings. "Security is a team sport, and we need to be able to think about security not as a tool, but as a platform," Kapoor wrote.

Two modes

The service operates in two modes: scanning already-deployed code for existing vulnerabilities, and feeding security-checked suggestions to developers while they write new code. Rivian CISO Mike Johnson was cited as an early adopter, saying the tool "shortens what really matters: timeline to fix serious vulnerabilities."

Beyond the AWS console

Continuum launched at the AWS Summit in New York in July. The coding-tool integrations push the service beyond AWS's own management console and into the environments where developers already work. The partnerships with both Anthropic and OpenAI signal AWS's intent to position Continuum as a neutral security layer across the major AI coding platforms, rather than as an Amazon-only tool.

Sources

AWS partners with Anthropic and OpenAI to bring Continuum into coding tools - SiliconANGLE, August 5, 2026: https://siliconangle.com/2026/08/05/aws-partners-anthropic-openai-bring-continuum-coding-tools/

AWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflows - AWS Blog, August 5, 2026: https://aws.amazon.com/blogs/security/aws-partners-with-anthropic-and-openai-to-bring-aws-continuum-into-developer-workflows/

AWSAnthropicOpenAISecurity
ShareX (Twitter)LinkedIn

Written by

axc

More to read

  • Semantic Caching in Production LLM Systems: Architecture, Approximate Nearest Neighbor Matching, Cross-Encoder Verification, Invalidation Dynamics, and Serving Economics

    Semantic Caching in Production LLM Systems: Architecture, Approximate Nearest Neighbor Matching, Cross-Encoder Verification, Invalidation Dynamics, and Serving Economics Serving large language models at enterprise scale presents severe latency and cost bottlenecks. While frontier reasoning models and deep autoregressive decoders cost between $2.50 and $60.00 per million tokens and incur time-to-first-token (TTFT) delays ranging from 800 milliseconds to several seconds, a substantial fraction of

    1 min

  • Kahneman-Tversky Optimization (KTO): Mathematical Foundations, Prospect Theory, and Binary Signal Alignment in Large Language Models

    Post-training alignment of large language models has long relied on pairwise comparison datasets. Methods such as Reinforcement Learning from Human Feedback (RLHF) and Direct Preference Optimization (DPO) assume access to curated pairs $(x, y_w, y_l)$, where a human or automated judge explicitly marks completion $y_w$ as superior to $y_l$ for a given prompt $x$. In production environments, however, collecting paired preferences is logistically complex, expensive, and artificial. Real-world telem

    1 min

  • Keenable Exits Stealth with 6M Seed to Build Web Index for AI Agents

    Keenable Exits Stealth with $26M Seed to Build Web Index for AI Agents Search infrastructure startup Keenable has emerged from stealth with $26 million in seed funding led by Accel, with participation from Conviction Partners and angel investors. The company is developing a web-scale indexing engine tailored specifically for programmatic retrieval by autonomous AI agents and language model workflows rather than human web browsers. Keenable was co-founded by Andrey Styskin, former head of searc

    1 min