The pricing page, which the announcement does not mention, shows a model that charges by the finding as well as by the codebase. Principal solutions architect Esra Kayabali describes a service that finds and validates code vulnerabilities, then delivers fixes as patches that can be automated or as pull requests in the connected repositories. It builds a context graph from those repositories and the surrounding AWS environment, with an optional collector supplying resource and network context from wherever the code runs.
Swami Sivasubramanian, VP of Agentic AI, and Christopher Rae, who leads AI security go-to-market at AWS, both framed the problem as volume rather than detection. Sivasubramanian wrote that most organizations running large application estates see thousands of findings a day; Rae put it more bluntly, saying scanners find thousands daily and "most becomes noise that doesn't matter in your environment."
