AWS embeds vulnerability platform into Codex and Claude Code, betting security beats models
Amazon Web Services has integrated its Continuum vulnerability platform directly into rival development tools — Anthropic's Claude Code and OpenAI's Codex — alongside its own Kiro IDE. The company made the announcement at Black Hat USA 2026.
This places AWS security tooling at the point where developers write code, regardless of which AI model they use. In parallel, AWS expanded Security Hub Extended, its curated single-bill security marketplace launched in February, adding a tenth category focused on supply chain protection with partners Chainguard and Socket.
Together, these announcements mark AWS's most sweeping attempt yet to become the default security control plane for enterprise software development in the AI era. The role carries significant commercial weight: the global cloud infrastructure market exceeds $143 billion per quarter, according to Synergy Research Group.
The urgency behind both launches traces back to a turning point in enterprise security earlier this year. Anthropic unveiled Claude Mythos Preview in April, a general-purpose AI model that during testing showed striking cybersecurity capabilities far beyond any prior system.
In pre-release evaluations, Mythos identified thousands of previously unknown zero-day vulnerabilities. This created a new reality for enterprises: attackers gained access to tools capable of automatically finding flaws in code, and companies now need similar defenses to keep pace. AWS is responding by embedding itself directly into the development environment where code is created, rather than relying on which model generates it.
Integration with Codex and Claude Code means developers using these popular AI assistants get AWS security checks in the same workflow, without switching between tools. The Security Hub Extended expansion with a supply chain category adds another control layer — companies can now track risks not only in their own code but also in the dependencies and components they use.
