# AWS Security Agent (Amazon Web Services)

AWS Security Agent is a standalone vertical AI agent from Amazon Web Services. An AWS agent that runs penetration tests on your applications, tries to exploit what it finds and reports validated vulnerabilities. Nearfi's Agent Index rates its autonomy 4/5 (multi-step on its own): it runs multi-step attack scenarios on its own and reports validated findings afterwards. The only human gate AWS describes is proving you own the domain, so it is not rated 5, which would need it to act without being pointed at a target. Status: live; 0 incident(s) logged.

Source: https://nearfi.co/agents/aws-security-agent

- Category: Coding · vertical · Standalone
- What it does: It reads source code, design documents, architecture diagrams and infrastructure-as-code to understand an application, then chains weaknesses into attack paths and attempts to exploit them to check they are real. Each finding comes with a CVSS score, severity rating, reproduction steps and remediation suggestions. Before testing starts you prove domain ownership with a DNS record or a verification file.
- Limits: Claranet, a UK security firm that had not benchmarked the tool, says agent-led testing is a 'force multiplier, not yet a universal substitute' and notes that standards such as PCI DSS 11.4 and NCSC CHECK still centre on qualified human testers. The AWS pages opened do not say whether individual test runs need approval.