Skyhawk Security integrates AWS Continuum to rank exploitable cloud vulnerabilities

Skyhawk Security brings weaponization-based prioritization to cloud security

Skyhawk Security announced an integration with AWS Continuum that fundamentally shifts how organizations prioritize vulnerabilities in cloud environments1

1

. The cloud detection and response company revealed the integration ahead of Black Hat USA 2026, positioning it as a solution to the growing gap between vulnerability discovery and remediation capacity2

2

.

The integration enables Skyhawk Security's AI Red Team to ingest application security findings from AWS Continuum and rank exploitable cloud vulnerabilities based on whether attackers could weaponize them as part of broader cloud attacks1

1

. AWS Continuum, launched in June as a machine-speed vulnerability management service, performs code security reviews, threat modeling and penetration testing across application development using whichever frontier model performs best at each step1

1

.

AI Red Team simulates attacks using digital twin of customer cloud environments

Skyhawk treats application-layer findings from AWS Continuum as starting points for simulated attacks that run continuously against a digital twin of customer cloud environments, ensuring production systems remain undisrupted1

1

. From each flagged vulnerability, the software analyzes cloud configurations, identities and permissions, network paths and deployed controls to hunt for viable attack paths to sensitive data or critical assets2

2

.

"Frontier models are finding more vulnerabilities than any team can remediate, while the time to exploit is collapsing," said Chen Burshan, CEO of Skyhawk Security. "Enterprises need to move beyond trying to fix everything faster and prioritize vulnerabilities based on true risk. Weaponization is the new priority signal"1

1

. Burshan emphasized that the integration helps security teams focus on the 1% of vulnerabilities that create true exposure2

2

.

Real-world demonstration exposes limitations of traditional cloud security

Skyhawk demonstrated the urgency of AI-driven threat prioritization in June when its AI Red Team seized full control of a financial services company's production AWS organization in seconds from a low-privilege position1

1

. The compromised environment had no misconfigurations, no excessive permissions, a leading cloud-native application protection platform deployed, and every dashboard indicator showing green. The takeover succeeded by chaining legitimate, correctly configured identity and access management permissions together—a scenario where static attack graph analysis showed no viable route to takeover1

1

.

This demonstration highlights why traditional approaches to cloud security fall short against sophisticated threats. CrowdStrike's 2026 Global Threat Report found cloud-conscious intrusions rose 37%, with a 266% jump in cloud targeting by state-linked actors1

1

, underscoring the accelerating threat landscape that demands new prioritization methods.

Integration extends existing AWS relationship for enhanced context

The AWS Continuum integration builds on Skyhawk's existing relationship with AWS, where the platform already processes telemetry from Amazon GuardDuty, Amazon Inspector and Amazon Macie1

1

2

2

. This provides Skyhawk with more context than findings surfaced through AWS Security Hub alone, enabling more accurate assessment of which vulnerabilities sit on paths attackers could actually walk1

1

.

Skyhawk Security, spun out of Israeli cybersecurity vendor Radware's cloud native protection business in 2022, positions its platform as designed to defend against AI-enabled attacks in cloud environments1

1

2

2

. As frontier AI models accelerate vulnerability discovery while attackers compress exploitation timelines, organizations face mounting pressure to adopt machine-speed vulnerability management approaches that distinguish theoretical risks from genuine threats warranting immediate attention.