AWS Continuum now checks your login credentials and suggests accessible domains before testing!

Hi, it's me! I found some news that security teams will be happy about, so let me share it with you.

AWS What's New aws.amazon.com

What was announced?

According to AWS What's New, AWS Continuum for penetration testing just got a new capability. AWS Continuum for penetration testing is a frontier agent that proactively secures applications throughout the development lifecycle, offering on-demand, customized penetration testing with real exploitability testing.

With this update, developers and security teams can now do two things before a test even runs.

• Test login credentials
• Review suggested accessible domains

The story so far

Until now, identifying all the URLs your application reaches required manual effort. On top of that, authentication failures were only discovered after a full test cycle completed. That meant you could spend time and resources running a test, only to find out afterward that the credentials were wrong all along.

What changes

With this launch, when you add login credentials during test configuration, AWS Continuum authenticates into your application exactly as a real user would. It captures every accessible domain reached during that login process and surfaces them as in-scope URL suggestions.

This lets you confirm, before the real test begins:

• The list of accessible domains
• Whether your credentials are valid
• Whether the agent covers the right endpoints

This makes it easier to configure an accurate network scope from the start, reducing misconfiguration and wasted test cycles.

Dive Deep

One nice detail: accessible domains are returned regardless of whether the credential test succeeds, fails, or times out. So you can use this feature just to catch credential misconfigurations, even if the login itself doesn't fully succeed.

This capability is available in all regions where AWS Continuum for penetration testing is available. More details can be found in the updated documentation and on the AWS Continuum product page.

Wrap-up

• AWS Continuum for penetration testing now supports credential testing
• Accessible domains reached during login are automatically suggested as in-scope URLs
• Accessible domains are returned whether the credential test succeeds, fails, or times out
• You can now configure an accurate test scope before the real test even begins

This is a great update for developers and security teams who regularly run penetration tests against their applications and want fewer wasted test cycles!