New AWS Security Agent secures applications proactively from design to deployment (preview)

This article announces AWS Security Agent in preview, an AI-powered agent that automates application security testing throughout the development lifecycle.

• Conducts automated design, code, and penetration testing reviews tailored to organizational requirements
• Context-aware agent understands application design, code, and specific security requirements
• Design review analyzes architectural documents for security risks before coding begins
• Code review checks GitHub pull requests for OWASP Top Ten vulnerabilities and policy violations
• On-demand penetration testing executes sophisticated multi-step attack scenarios and adapts dynamically
• Enforces custom organizational security requirements beyond common vulnerability detection
• Reduces penetration testing from weeks to hours, dramatically lowering assessment costs
• Free during preview period; available in US East (N. Virginia) region

AWS Security Agent bridges the gap between frequent software releases and infrequent security evaluations, enabling continuous security validation from design through deployment without manual delays.