AWS has made Continuum for code vulnerabilities generally available in Northern Virginia and Oregon. The service attempts to separate exploitable flaws from scanner noise by running a real exploit in an isolated sandbox and producing reproduction steps, an attack path and a blast-radius assessment.
Continuum builds a context graph from connected code repositories and AWS resources. An optional collector adds network and runtime configuration to help determine whether a vulnerable path is reachable in the customer’s environment. Findings that it confirms can produce a patch or pull request. At launch, every remediation requires human approval; AWS says it may later allow approved classes of fixes to be applied automatically.
Pricing combines codebase size with inference work. The context fee starts at $200 per million lines of code per month, while inference costs $10 per unit consumed as findings are processed. AWS examples range from $1,200 for one million lines and 100 one-unit findings to $218,200 for 100 million lines and 10,000 two-unit findings.
A sandbox proof demonstrates exploitability, but it does not by itself guarantee that a generated patch preserves intended behavior. Human review remains the final safeguard.