AWS has announced Continuum, a new gated-preview service that uses AI to continuously discover, investigate, and remediate code vulnerabilities in enterprise environments. Unlike traditional security tools that generate alerts requiring manual triage, Continuum aims to automate the full remediation lifecycle — from validating whether vulnerabilities are exploitable to proposing and applying fixes. It covers both first-party code and third-party dependencies, including open-source supply chain risks. An 'enforce mode' allows autonomous remediation once enterprises trust the system's understanding of their environment. Analysts note the service shifts the CISO's role from managing findings to governing automated remediation policies, and that most enterprises aren't yet ready for fully autonomous fixes — a reality reflected in AWS's graduated trust model.
