Amazon Web Services (AWS) has integrated its AI-powered security platform, Continuum, directly into OpenAI's Codex and Anthropic's Claude Code, marking a significant move to secure AI-generated code. This integration is part of AWS's broader strategy to position itself as the default security control plane for enterprise software development in the AI era.
TL;DR
- AWS integrates Continuum into OpenAI Codex and Anthropic Claude Code to secure AI-generated code.
- The move is part of AWS's strategy to become the default security control plane for enterprise software development.
- AWS also expanded its Security Hub Extended with a new supply chain security category, adding Chainguard and Socket as partners.
What happened
AWS announced at Black Hat USA 2026 that its Continuum platform for code vulnerabilities will integrate directly into Anthropic's Claude Code and OpenAI's Codex, alongside AWS's own Kiro IDE. This integration embeds AWS security tooling at the point where developers write code, regardless of which AI model they use.
Simultaneously, AWS expanded Security Hub Extended, its curated, single-bill security marketplace, with a 10th security category focused on supply chain protection. The new category includes Chainguard and Socket as partners, bringing the total number of curated partner solutions to 23.
Why it matters
The urgency behind both launches is driven by the exponential growth in known vulnerabilities, outpacing any organization's ability to triage and fix them. AWS's Continuum is designed to address this problem by automating the discovery, prioritization, validation, and remediation of code flaws.
By integrating Continuum into OpenAI and Anthropic's coding tools, AWS aims to position itself as the default security control plane for enterprise software development. This role carries enormous commercial implications as the global cloud infrastructure market surpasses $143 billion per quarter, according to Synergy Research Group.
The addition of the supply chain security category to Security Hub Extended addresses the intensifying threats in the open-source supply chain. This move is driven by customer demand and is part of AWS's strategy to provide a holistic security offering.
Key facts
- AWS's Continuum platform integrates directly into OpenAI's Codex and Anthropic's Claude Code, alongside AWS's own Kiro IDE.
- AWS expanded Security Hub Extended with a 10th security category focused on supply chain protection, adding Chainguard and Socket as partners.
- The global cloud infrastructure market surpasses $143 billion per quarter, according to Synergy Research Group.
- AWS's Continuum operates as an 'agent-team loop architecture' with four distinct phases: Discovery, Prioritization, Validation, and Remediation.
- AWS absorbs the underlying token costs for whichever frontier model performs best at each phase of the scan.
- The new supply chain security category in Security Hub Extended includes 23 curated partner solutions, all on a single AWS bill with no required long-term commitments.
- Chainguard focuses on providing hardened, secure-by-default container images and packages rebuilt from verified source code.
- Socket performs behavioral monitoring of packages as they are pulled into a developer's environment, detecting threats like typosquatting, maintainer account takeover, and obfuscated malicious code.
Context
AWS's move to integrate Continuum into OpenAI and Anthropic's coding tools is a strategic effort to secure AI-generated code and position itself as the default security control plane for enterprise software development. This integration is part of AWS's broader strategy to address the exponential growth in known vulnerabilities and the intensifying threats in the open-source supply chain.
The addition of the supply chain security category to Security Hub Extended is driven by customer demand and is part of AWS's strategy to provide a holistic security offering. This move is significant as the global cloud infrastructure market continues to grow, with the market surpassing $143 billion per quarter, according to Synergy Research Group.
AWS's philosophy behind Security Hub Extended is to provide customers with a curated selection of security offerings that are complementary rather than duplicative. This approach is designed to ensure that customers can operate in the most secure way possible on AWS, not necessarily to grow a large security business.
