AWS First Steps
New feature

AWS Security Agent adds budget controls and finding revalidation

AWS Security Agent now includes task-hour limits for penetration tests and revalidation of fixed vulnerabilities, improving cost management and security verification efficiency

AWS Security Agent, part of AWS Continuum, offers an AI-driven penetration testing service for web applications. Previously, teams lacked ways to cap test costs or confirm fixes for vulnerabilities. New features now allow setting maximum task-hour limits (preset, custom, or none) for tests, which stop gracefully when reached while preserving findings. Users can also revalidate individual findings after fixes without rerunning full tests, receiving clear active or resolved statuses with full history linked to original findings

Why it matters

Targeted at security teams and DevSecOps engineers, this update improves cost management and verification of vulnerability fixes

Read the original AWS announcement

Related articles and terms

Centralized Security Posture Management with AWS Security Hub - Aggregating Findings and Automated ResponseAggregate findings from GuardDuty, Inspector, and Macie using ASFF, quantify your security score through automated security standard evaluations, and set up automated remediation via EventBridge.AWS Security HubA service that provides centralized visibility into the security posture of your entire AWS environment, performing automated assessments against industry-standard security benchmarks and aggregating findings.Security Posture Management - Building a Unified Security Monitoring Foundation with AWS Security HubLearn about unified security monitoring with AWS Security Hub and automated threat detection through GuardDuty integration. This guide covers visualizing compliance with security best practices and security governance for multi-account environments.Amazon CodeGuru SecurityA static application security testing service that uses ML to automatically detect source code vulnerabilities and suggest fix codeAmazon InspectorA security assessment service that automatically and continuously scans EC2 instances, Lambda functions, and container images for vulnerabilities