Release
AWS Ships Continuum for Code Vulnerabilities
InfoQ · By Steef-Jan Wiggers ·
AWS has made Continuum for code vulnerabilities generally available in two regions. The service proves exploitability by running real exploits in a sandbox, then opens fixes as pull requests. Published pricing charges per finding processed as well as per line of code, and…
The Brief
- AWS made Continuum for code vulnerabilities generally available in two regions.
- The service runs real exploits in a sandbox to prove exploitability, then opens fixes as pull requests.
- Published pricing charges per finding processed and per line of code.
Why it matters
Teams using AWS can now adopt an automated tool that verifies whether code vulnerabilities are actually exploitable and proposes fixes, though cost depends on findings volume and codebase size.
Who’s affected
- Teams using AWS Continuum for code scanning
- Developers managing codebases with security backlogs
- #aws
- #code-security
- #vulnerability-scanning
- #devsecops
- #generally-available
Timeline
InfoQ reports Continuum for code vulnerabilities is generally available in two regions
InfoQ
AWS Ships Continuum for Code Vulnerabilities
