Understand this story
On October 23, 2026, AWS made Continuum's code vulnerability detection and remediation capabilities generally available. The service can find and verify vulnerabilities in code repositories, combine AWS environment information to determine whether an attacker can reach the vulnerability and what resources could be further accessed, rank them by business impact, and provide remediation recommendations; when reproducing vulnerabilities in an isolated sandbox, it provides PoC code and reproduction steps, and fixes are submitted as pull requests to the associated GitHub repository, requiring human review before being applied. Currently, this capability is available only in the US East (N. Virginia) and US West (Oregon) regions. In a benchmark announced on October 5, AWS said that Continuum completed 819 of 920 tasks on CyberGym-E2E, with an end-to-end success rate of 89.0%, compared with the previous publicly reported best of 65.9%; however, the proportion of patches that also fixed the historical vulnerabilities specified by the benchmark was only 37.8%, compared with the previous publicly reported best of 26.2%. The benchmark covers only C/C++ memory safety vulnerabilities in 139 open-source projects, and the tests were conducted by AWS itself.
AI-generated from public reports
Developments
1 confirmed developments
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 24
The New Stack
AWS security agent Continuum is now generally available, claims it fixes 89% of vulnerabilities on CyberGym-E2E
AWS on Thursday made its code vulnerability security agent Continuum generally available; the service can find and verify vulnerabilities in code repositories, check them against AWS environments, and submit pull requests containing remediation suggestions. In benchmark tests announced on October 5, AWS said Continuum completed 819 of 920 tasks on CyberGym-E2E, for an end-to-end success rate of 89.0%, compared with the previous publicly reported best of 65.9%; however, the proportion of patches that also fixed the historical vulnerabilities specified by the benchmark was only 37.8%, compared with the previous publicly reported best of 26.2%. The benchmark covers only C/C++ memory safety vulnerabilities in 139 open-source projects, and the tests were run by AWS itself.
The New StackRelated discussion
The New Stack joined this discussion
This post contributes to heat; it is not a formal report or confirmed fact.
Oct 23
heise online
AWS Continuum officially launches code vulnerability detection and remediation capabilities
AWS has officially made available the code vulnerability detection and remediation feature in its security service Continuum; this feature verifies whether scan results can actually be exploited, prioritizes them by business impact, and provides remediation recommendations. Continuum links code repositories with AWS environment information into a context graph to determine whether an attacker can reach a vulnerability and what resources could be further accessed, and provides PoC code and reproduction steps when reproducing vulnerabilities in an isolated sandbox. Remediation is submitted as a Pull Request to the associated GitHub repository and is applied only after manual review; it is currently available only in the US East (N. Virginia) and US West (Oregon) regions.
Heat trend for this story
- Current
- 9
- Period peak
- 14 Oct 24 23:00
- 24-hour change
- —
Move the pointer or select the chart to inspect hourly heat. Use the left and right arrow keys with a keyboard.