Strategic partnership: Amazon Web Services announced on August 5, 2026 the availability of AWS Continuum for code vulnerabilities in preview, as well as its upcoming integration with Anthropic’s Claude Code , OpenAI’s Codex , and Kiro tools . The goal is ambitious: to transform the process of identifying and fixing vulnerabilities from a months-long backlog of tasks to an automated step that is embedded in the code proposal itself, at machine speed. SecNews’ technical team explains what AWS Continuum is, how it works with popular AI code helpers, and what the move means for Greek software development teams and the local DevSecOps industry.
See also: Cloudflare OS: Open AI workspace for enterprises
What is AWS Continuum?
AWS Continuum for code vulnerabilities is a new security platform that is currently in preview. It is based on the agent-team loop, where discrete AI agents collaborate with each other through a central orchestrator. Its key feature is that it does not act as a standalone scanning tool, but as a unifying layer between AI code assistants and each customer's environment on AWS.
Continuum undertakes four main functions:
- Discovers vulnerabilities in existing code and new development
- Prioritizes findings based on the customer's business context and AWS environment — IAM settings, network topology, and exposure surfaces
- Verify vulnerabilities in a sandbox before proposing fixes
- Provides corrections to machine speed, without interrupting the programmer's flow
The main innovation is the so-called harness — a specialized orchestration infrastructure that surrounds each AI model. AWS compares the model to the engine of a race car, and the harness to everything that surrounds it: the garage, the technical team, the governance elements. Without the right harness, even the most powerful model does not perform as a product.
How it works within Claude Code, Codex and Kiro
Integration with Claude Code, Codex and Kiro is coming soon and follows a clean workflow:
- The developer starts scanning on demand from within their favorite IDE
- Scanning detects potential security issues
- Findings are sent to Continuum
- Continuum prioritizes them using IAM settings, network topology, and exposure surfaces of the specific AWS account
- Verify each finding in an isolated environment to rule out false positives
- Returns the prioritized, verified information to the AI assistant
- The AI assistant adapts its suggestions accordingly, so that the code itself being written is already secure
In practice, the approach collapses the traditional chain of write → scan → filter → prioritize → fix → rescan into a single result: the code proposal itself. Two distinct modes of use are offered to customers:
- Existing Code: Using AWS Continuum as a standalone platform that scans, prioritizes, verifies, and remediates across the entire environment
- New code (greenfield): Using the Continuum plugin within Claude Code, Codex or Kiro, in order for the developer to receive suggestions that are already security-verified
Also useful: iCloud Private Relay: A passkey request is enough to reveal the real IP
What the market says: Rivian's testimony
The only official testimony in the announcement comes from Mike Johnson, CISO of Rivian, the well-known American electric vehicle company. Johnson said that Continuum connects source code with enterprise knowledge, allowing security teams to pinpoint vulnerabilities and confirm that the alerts are indeed critical. This, he stressed, shortens what really matters: the time to fix serious vulnerabilities.
AWS emphasizes that early design partners are already seeing results, although it has not published specific data on reductions in remediation time or false positive rates.
See also: Claude or Copilot in a Greek business: AWS Bedrock for GDPR and DORA compliance
Multi-model strategy and Frontier Model Forum
AWS Continuum doesn’t rely on a single model. It integrates multiple models and uses the most appropriate one for each step of the process. AWS works with model providers to jointly evaluate security performance to select the best model for each task within Continuum and other AWS security products.
The company is a member of the Frontier Model Forum, an industry consortium that develops common security standards, evaluation methods, and benchmarking for the most advanced AI models. This approach gives customers a neutral perspective on each AI provider, without reliance on a single company.
Implications for Greek development teams
For the Greek DevSecOps market, AWS's move has three important dimensions:
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
- Greek startups and SaaS companies: Those already using Claude Code or Codex will be able to have a validated security context from the beginning of development, reducing the time and cost of emergency fixes
- Banks and insurance companies: Within the framework of DORA obligations, Continuum can function as a documented mechanism for continuous vulnerability assessment, as long as it runs within the AWS Frankfurt or Ireland regions
- Public bodies: For Greek public services building applications on AWS GovCloud or equivalent certified infrastructures, Continuum provides a standardized secure development model
- Greek DevSecOps consulting companies: New service opportunity is created for implementation partners who will help clients integrate Continuum into their internal CI/CD pipelines
Although access is in preview and integrations with Claude Code, Codex, and Kiro will come soon, Greek security teams should already be evaluating how the tool will fit into their own reporting and governance mechanisms.
AWS Continuum FAQ
Does AWS Continuum replace existing SAST and SCA tools?
Not necessarily. Continuum acts as a unification layer that pulls data from multiple sources — including existing static and dynamic analysis tools — and organizes it within the context of a specific AWS account. For many organizations, it will act as an add-on layer rather than a replacement.
Do I need to use AWS to leverage Continuum?
Yes. The tool relies on the AWS environment context to prioritize findings — IAM settings, network topology, exposure surfaces. Without code that runs or will run on AWS, its full capabilities are not utilized.
How much does the service cost?
AWS has not announced official pricing for the preview. The final pricing model is expected to be pay-as-you-go, as is the case with the company's other security products.
How do I sign up for the preview?
Interested customers can request access through the AWS Continuum page. AWS evaluates each request and prioritizes design partners with mature production workloads.
When exactly will it be integrated into Claude Code, Codex, Kiro?
AWS describes the integration as coming soon, with no specific date. Interested customers can follow the announcements from both AWS and Anthropic and OpenAI for exact timelines.
Does it affect GDPR or DORA compliance?
Continuum runs within the customer's AWS account, with data remaining in the customer's zone of choice (Frankfurt, Ireland, Paris for Europe). Greek banks and insurance companies subject to DORA must document Continuum as an external ICT third-party service provider, just like any other AWS tool.
The announcement of AWS Continuum and its integration with Claude Code, Codex and Kiro represents one of the most significant moves in the DevSecOps market for 2026. AWS’s approach of not creating yet another scanning tool, but a unifying orchestration layer over multiple AI models, fits in with the industry’s general trend towards multi-vendor architectures. For Greek development teams, the challenge now is to start experimenting with the new philosophy of coding that incorporates security from the front line. The SecNews editorial team will monitor the progress of the preview and will update with each official release of the integrations. Sources: AWS Security Blog, Amazon Web Services, Anthropic, OpenAI.
