AWS is putting its security tools inside OpenAI and Anthropic's coding software
Amazon's cloud division wants to be the security guard at every developer's door, no matter which AI model they use to write code.
Key points
- AWS announced at Black Hat USA 2026 that its Continuum security platform will integrate into OpenAI Codex, Anthropic Claude Code, and AWS's own Kiro IDE.
- Anthropic's Claude Mythos Preview, released in April 2026, found thousands of unknown zero-day vulnerabilities (security flaws no one has patched yet) across major operating systems and browsers, with more than 99% still unpatched.
- The median time from a vulnerability being discovered to a criminal using it as a weapon collapsed from 771 days in 2018 to under four hours by 2024, and AWS projects under one hour by end of 2026.
- AWS expanded its Security Hub Extended marketplace to 23 curated partner tools, adding supply chain security as a tenth category, with partners Chainguard and Socket.
- Customers pay a single AWS price for Continuum; AWS absorbs the underlying AI model costs itself.
What did AWS actually announce?
AWS built a security tool called Continuum that watches for dangerous flaws as developers write code, and it will now work inside two rival companies' coding assistants: OpenAI Codex and Anthropic Claude Code, which are AI tools that help programmers write software faster.
The announcement came at Black Hat USA 2026, one of the biggest cybersecurity conferences of the year. For ordinary people, the practical point is this: the AI tools helping developers build the apps and websites you use every day will now have AWS's security checks running quietly in the background.
Why is this suddenly urgent?
A new AI model made an already bad problem much worse, very fast.
Anthropic released Claude Mythos Preview in April 2026. During testing, it found thousands of so-called zero-day vulnerabilities, meaning security holes that nobody knew existed and therefore nobody had fixed. More than 99% of those holes are still open. At the same time, the window between a flaw being spotted and criminals using it as a weapon shrank from 771 days in 2018 to under four hours by 2024.
Chet Kapoor, AWS's vice president of search, security, and observability, told VentureBeat plainly: "CISOs have had code vulnerabilities for a while, and then Mythos came along, and it just made it a lot worse. They already had a backlog. Now the backlog is 5x more."
That backlog is what Continuum is designed to chew through.
How does Continuum actually work?
It runs in four steps.
First, it scans all of a company's code and pulls in the existing list of known problems. Second, it ranks those problems by how dangerous they are to that specific business, not just in general. Third, it builds a controlled test, a kind of locked room where it tries to see whether a flaw can actually be exploited and how bad the damage could be. Fourth, it suggests a fix, whether that is a code change, a settings adjustment, or a network tweak, already tested in that same locked room.
A human approves every step. The system does not act without permission.
| Phase | What it does |
|---|---|
| Discovery | Scans code and imports known vulnerability list |
| Prioritization | Ranks risks by real-world business impact |
| Validation | Tests whether each flaw can actually be exploited |
| Remediation | Proposes and pre-tests a fix |
The pricing is deliberately simple. Customers pay AWS one price. AWS then picks whichever AI model does each phase best, and covers those costs itself.
Should this worry or reassure ordinary people?
A bit of both, honestly. The reassuring part: the people building the software you rely on will have better automated tools to catch dangerous mistakes before those mistakes reach you.
The cautious part: Continuum is new, and the vulnerability backlog it is trying to tackle is enormous. Success stories at this scale are rare. Most security tools claim to solve the problem; few do it completely.
Kapoor's vision is for security to move from humans staring at dashboards to AI agents, software that can carry out multi-step tasks on its own, acting at machine speed. That shift is real and happening. Whether AWS becomes the dominant layer across the whole industry remains to be seen.
The one honest takeaway: if you use any software product at work or at home, ask your IT team or vendor whether their development pipeline now includes automated security scanning. It is a reasonable question, and the answer tells you a lot about how seriously they take the current threat environment.
