AWS Security Agent adds threat modeling, Kiro power and Claude Code plugin, and more

This article announces new features for AWS Security Agent, a frontier agent that proactively secures applications throughout the development lifecycle.

• Code review updates with pull request scanning, remediation, and support for GitHub, GitLab, Bitbucket, and Confluence integration
• Threat modeling in preview analyzes design documents and source code using STRIDE framework to identify threats and mitigations
• Kiro power and Claude Code plugin enable running code reviews and threat models directly from IDE or CLI without context switching
• Security requirements packs for AWS WAF, NIST CSF, PCI DSS, and custom organizational compliance validation
• Simulated environment validation demonstrates proof of exploitability for all findings
• On-demand penetration testing and full repository code review capabilities available

AWS Security Agent now provides unified security coverage across design-time, development-time, and deployment-time phases with integrated IDE tooling and compliance management.