re:Invent 2025: AWS and Security Vendors Unveil New Products and Capabilities

At re:Invent 2025, AWS revealed a slate of new security products and enhancements, including a preview version of AWS Security Agent designed to proactively secure applications throughout development and perform automated security reviews and context-aware penetration testing. According to AWS, the agent continually validates security from design to deployment and adapts its attack plan as it runs.

The company also announced general availability of AWS Security Hub, a central panel for viewing, aggregating, and prioritising security risks, and improvements to AWS GuardDuty Extended Threat Detection, adding two attack sequence findings for EC2 instances and ECS tasks. In addition, AWS introduced IAM Policy Autopilot, an open source MCP server that helps AI coding assistants generate AWS IAM policies from application code.

A public preview of AWS DevOps Agent was also announced, aimed at accelerating incident response. Several security vendors followed with announcements or integrations at the event, including SentinelOne, ZEST Security, Salt Security, Sumo Logic, Skyhawk Security, HiddenLayer, and Securonix, each detailing new capabilities or partnerships with AWS Security Hub and related services.