Back to Devoured - May 18, 2026

DEVOURED

AWS Security Agent now supports full repository code reviews

DevOps securityawsai AWS

AWS Security Agent now analyzes entire repositories for architectural vulnerabilities that pattern-matching misses, auto-generating line-specific fixes for free during preview.

What: AWS launched full repository code review for AWS Security Agent on May 12, 2026. The AI-driven feature analyzes entire codebases to detect architectural and data flow vulnerabilities by reasoning about trust boundaries rather than pattern-matching, then generates code remediation with file and line-specific fixes. Available at no additional charge during preview for existing customers in all AWS regions where the service operates.

Why it matters: AWS explicitly states AI can now build working exploits at unprecedented scale, so they are offering free preview access to help defenders strengthen codebases before attackers exploit the same capabilities, signaling the cloud security arms race is entering an AI-acceleration phase.

Takeaway: If you use AWS Security Agent, visit the console to enable full repository code review and run your first scan while it is free during preview.

Deep dive

AWS Security Agent's new full repository code review capability performs deep, context-aware analysis of entire codebases rather than pattern-matching
Unlike traditional static analysis tools that match code against known vulnerability patterns, this feature reasons about application architecture, trust boundaries, and data flows
When vulnerabilities are detected, the system generates code remediation with specific fixes tied to exact files and line numbers
AWS explicitly acknowledges that AI-driven cybersecurity capabilities are advancing rapidly and that AI can find vulnerabilities and build working exploits at a scale and speed we have not seen before
The company is providing free early access during preview for existing AWS Security Agent customers with no additional charge
Available in all AWS Regions where AWS Security Agent is currently available
Access via AWS Security Agent console to enable the feature and run repository reviews

Decoder

Trust boundary: A line in an application architecture where data or control flow transitions between different security contexts, such as user input entering the system, internal service calling external API, or crossing process and network boundaries. Vulnerabilities often occur when these boundaries are not properly validated or secured.

Original article

AWS Security Agent now supports full repository code reviews

Today, AWS announces the release of full repository code review, a new capability in AWS Security Agent that performs deep, context-aware security analysis of your entire codebase. Unlike traditional static analysis tools that match code against known vulnerability patterns, full repository code review reasons about your application's architecture, trust boundaries, and data flows to surface systemic vulnerabilities that pattern-matching tools miss. When vulnerabilities are found, the scanner generates code remediation, specific fixes tied to the exact file and line, so teams can identify and remediate security vulnerabilities faster than ever before. This capability is available at no additional charge for existing AWS Security Agent customers during the preview.

AI-driven cybersecurity capabilities are advancing rapidly. AWS Security Agent can find vulnerabilities and build working exploits at a scale and speed we haven't seen before. AWS is prioritizing free early access for customers, giving defenders the opportunity to strengthen their codebases and share what they learn so the whole industry can benefit.

Full repository code review is available in in all AWS Regions where AWS Security Agent is available.

To get started, visit the AWS Security Agent console to enable full repository code review and run your first review. To learn more, see the AWS Security Agent documentation.

Explore all 67 articles in today's digest