Amazon Web Services wants to cut the pile of scanner alerts down to the ones an attacker could actually use. AWS Continuum for code vulnerabilities , now generally available, takes findings from across a customer’s environment, checks which ones are exploitable, ranks them by business impact and opens a pull request with a proposed fix for each.

The service went live Thursday afternoon in the US East (N. Virginia) and US West (Oregon) regions. In the launch post, AWS’s Esra Kayabali framed it as a response to speed on the attacker’s side: “Using frontier artificial intelligence (AI) models, threat actors can turn a vulnerability disclosure into working exploit code in minutes,” she wrote, and the same tools that speed up development also add to the findings security teams have to work through.

Reachability decides the ranking

Continuum builds what AWS calls a context graph from two places, the customer’s code repositories and its AWS environment.…