AWS Continuum now supports credential testing and accessible domain suggestions
AWS Continuum for penetration testing now allows developers and security teams to test login credentials and receive suggested domains before a penetration test runs, simplifying accurate network scope configuration and reducing misconfigurations.
AWS Continuum for penetration testing provides on-demand customized penetration tests and real attack simulations, actively protecting applications throughout the development lifecycle. Previously, identifying all URLs an application reaches required manual effort, and authentication errors were only discovered after test cycles completed. With this new feature, adding login credentials during test configuration allows AWS Continuum to authenticate to the application like a real user, capturing all domains reachable during login and displaying them as proposed in-scope URLs. Developers can verify accessible domains and validate credentials before actual testing begins, ensuring the agent covers appropriate endpoints. Accessible domains are returned regardless of whether credential testing succeeds, fails, or times out. This feature is available in all regions where AWS Continuum for penetration testing is offered.
Why it matters
AWS Continuum is a penetration testing service that protects applications throughout the development lifecycle. This update enables developers and security teams to validate credentials and ensure proper scope before test execution.