AWS Security Agent
AI agent for security testing
An AI agent that supports application security throughout the development lifecycle: reviews designs and code against your organization's security requirements and runs on-demand penetration tests. A new service (launched late 2025); features are still changing.
- Cost$$ Medium
- Difficulty●●●●●
- Costs money when idle?No
- Serverless
Think of it asLike having an extra virtual security specialist who reads your code and tries attacks for you.
When to use it
✓ Use it when
Dev teams that want to check security earlier and more often.
✗ Avoid it when
Scanning CVEs in images/instances → Inspector; detecting attacks on an account → GuardDuty.
Common uses
- Review pull requests against internal security standards
- Pentest a web app before launch
What does it cost?
- Pricing model: Charged by agent usage (number of reviews, testing time).
