Amazon Web Services (AWS) has announced partnerships with Anthropic and OpenAI to integrate their AI models into AWS Continuum, enabling real-time code vulnerability scanning within developer tools. The integrations will cover Claude Code, Codex, and Kiro, allowing developers to trigger security scans without leaving their editors.
TL;DR
- AWS partners with Anthropic and OpenAI to integrate their models into Continuum for in-editor code vulnerability scanning.
- The integrations will cover Claude Code, Codex, and Kiro, enabling real-time security scans within developer tools.
- Continuum ranks vulnerabilities based on their potential impact and builds working exploits to confirm their validity.
What happened
AWS has partnered with Anthropic and OpenAI to integrate their AI models into AWS Continuum, a service designed to identify and rank code vulnerabilities. The integrations will cover Anthropic's Claude Code, OpenAI's Codex and Kiro, and AWS's own agentic development environment. According to a blog post by Chet Kapoor, vice president of search, security, and observability at AWS, the partnerships aim to address the bottleneck in the machinery around AI models, not the models themselves.
Continuum will allow developers to trigger a security scan without leaving their editor. The findings will be ranked against the rest of the customer's environment before any recommendations are made. The service reads account configurations, identity and access management policies, network topology, and internet exposure to decide if a finding is worth a developer's attention. A bug in code that never reaches production ranks below one sitting on a public path.
AWS Continuum for code vulnerabilities remains in gated preview and requires a request for access. The company has not provided a specific date for the Claude Code, Codex, and Kiro integrations, only stating that they are coming soon.
Why it matters
This integration is significant for developers as it allows them to identify and address code vulnerabilities in real-time, without disrupting their workflow. By integrating AI models from Anthropic and OpenAI, AWS is leveraging the strengths of different models to provide a more comprehensive security solution. This can help developers and organizations identify and fix security issues more quickly and efficiently.
For startups and investors, this partnership highlights the growing importance of AI in cybersecurity and the potential for AI models to be integrated into various aspects of software development. It also demonstrates the competitive landscape, with major players like AWS, Anthropic, and OpenAI collaborating to provide more robust security solutions.
Key facts
- AWS has partnered with Anthropic and OpenAI to integrate their AI models into AWS Continuum.
- The integrations will cover Claude Code, Codex, and Kiro.
- Developers can trigger a security scan without leaving their editor.
- Continuum ranks vulnerabilities based on their potential impact.
- The service builds working exploits in a sandbox to confirm the validity of vulnerabilities.
- AWS Continuum for code vulnerabilities remains in gated preview and requires a request for access.
- The company has not provided a specific date for the integrations, only stating that they are coming soon.
- Continuum is model-agnostic, calling on whichever frontier model performs best at a given stage.
Context
AWS Continuum was launched at the AWS Summit in New York on June 17. The service is designed to be model-agnostic, calling on whichever frontier model performs best at a given stage. Third parties have already started building on it, with Skyhawk Security Ltd. feeding Continuum findings into simulated attacks against digital twins of customer cloud environments.
This partnership is a significant step in the integration of AI models into software development and cybersecurity. It highlights the growing importance of AI in these fields and the potential for collaboration between major players to provide more robust and comprehensive solutions.
