AWS Continuum for code vulnerabilities
AWS service that validates code vulnerabilities in a sandbox, ranks them by business impact and opens fix pull requests.
Overview
AWS Continuum for code vulnerabilities reached general availability on October 22, 2026. It finds and validates vulnerabilities, confirms which are exploitable, ranks them by business impact and opens pull requests with a patch, dependency upgrade or configuration change. It builds a context graph from your repositories (GitHub or an Amazon S3 bucket) and, optionally, an AWS collector that gathers resource and network details to judge reachability. For findings it can reproduce, it runs the exploit in an isolated sandbox and attaches proof-of-concept code. Every fix requires human approval. It is available in US East (N. Virginia) and US West (Oregon).
This is a sourced directory entry. Features and capabilities are reported in the linked sources; this entry does not document independent Aymorphic testing.
Key features
- Exploit validation in an isolated sandbox with proof-of-concept code and evidence levels
- Context graph combining code and AWS environment details for reachability and blast radius
- Fixes delivered as pull requests; human approval required
- Sources: GitHub repositories or Amazon S3; scheduled scans per environment
- Automatic application of some fix types planned, gated by test coverage and success history
Use cases
- Triaging thousands of scanner findings down to exploitable, high-impact issues
- Generating reviewable patches for confirmed vulnerabilities
Pricing
Pricing is on an AWS pricing page linked from the launch post; rates are not stated there.
Pricing reflects the source record and may change. Confirm current terms with the provider.
Dates and sources
- Released
- 22 Oct 2026
- Record updated
- 27 Oct 2026
- Record last checked
- 27 Oct 2026