Meta chases OpenAI, Anthropic with new AI coding app Muse Code

Amazon Web Services (AWS) has announced partnerships with Anthropic PBC and OpenAI Group PBC to integrate Continuum, a code security tool, into developers' coding environments. The integration allows users to scan for security vulnerabilities within their code without leaving their editor. The findings are then sent back to Continuum, which evaluates them against the customer's entire environment and recommends appropriate actions.

Chet Kapoor, vice president of search, security, and observability at AWS, explained the partnerships in a blog post, stating that the bottleneck in detecting vulnerabilities has moved from the model to the supporting machinery. AWS describes its own version as an "agent-team loop," an orchestration layer that selects a model per task and integrates it into the customer's account.

Continuum assesses account configurations, identity and access management policies, network topology, and internet exposure before determining the importance of a vulnerability. It also generates a working exploit in a sandbox to confirm the vulnerability's authenticity and eliminate false positives. AWS highlighted two ways to use Continuum: for existing code, it works through what is already deployed, and for new code, it provides security-checked suggestions while the code is still being written.

Mike Johnson, chief information security officer at Rivian Automotive Inc., emphasized how Continuum reduces the time to fix serious vulnerabilities. The service is model agnostic, utilizing the most effective frontier model at a given stage, as demonstrated by Anthropic's Claude Mythos. Third parties are already integrating Continuum, such as Skyhawk Security Ltd., which uses it to evaluate the real-world impact of vulnerabilities in simulated attacks against digital twins of customer cloud environments.

Currently in gated preview, AWS Continuum for code vulnerabilities requires a request for access, with no specific date announced for the integrations with Anthropic's Claude Code, OpenAI's Codex, and Kiro.