AWS Security Agent, part of AWS Continuum, now includes threat modeling, advanced code reviews, and support for multiple code repositories. These updates aim to enhance application security throughout the development lifecycle by offering context-aware analysis and vulnerability remediation.
At re:Invent 2025, AWS introduced updates to its Security Agent, a tool designed to secure applications through their development lifecycle. The enhancements focus on threat modeling and code review functionalities, aiming to proactively identify and mitigate security risks.
The latest release includes the ability to perform on-demand penetration testing and a full repository code review. Users can now leverage new integrations for GitHub, GitLab, Bitbucket, and Confluence to contextually analyze their code and documentation during code reviews.
The threat modeling feature uses the STRIDE framework to evaluate application design documents and source code. It provides insights into potential threats and offers recommended mitigations, enhancing understanding of the application's security posture.
AWS Security Agent has improved code reviews with reasoning-based analysis that identifies complex vulnerabilities beyond traditional methods. The tool checks code against organizational security requirements and supports remediation directly in the developer's workflow.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
AWS Security Agent, part of AWS Continuum, now includes threat modeling, advanced code reviews, and support for multiple code repositories. These updates aim to enhance application security throughout the development lifecycle by offering context-aware analysis and vulnerability remediation.