Application security teams face an impossible challenge: scale security expertise across growing application portfolios while maintaining development velocity. Traditional approaches force organizations to choose between speed and security. In this session, discover how AWS Security Agent transforms application security from reactive to proactive through AI-powered automation. Learn how this frontier agent conducts automated security reviews customized to your organizational requirements and delivers on-demand penetration testing tailored to your applications. Join us to see how you can scale security coverage and prevent vulnerabilities early in the development lifecycle while maintaining the speed of modern development.
What this session is about
Playbook
Editorial commentary · what to actually do about this on Monday
The concept
Automated security review + on-demand penetration testing, customised to your organisation's policies and threat model.
Why it matters
AppSec teams are perpetually under-resourced. Automating the "tier 1" review work gives you real leverage without compromising rigor.
The hard parts
Customisation matters — generic checks miss your specific threat model and create alert fatigue. Out-of-the-box config is rarely good enough.
Playbook moves
(1) Encode your threat model as agent prompts/configurations. Treat them as code. (2) Re-run on every PR, not just every release. (3) Tune the false-positive rate aggressively — alert fatigue kills adoption.
The surprise
AI pentest finds *different* bugs than human pentest. Don't replace; complement. AI is great at exhaustive coverage (every endpoint, every parameter combination); humans are great at creative chaining (using bug A to enable bug B to escalate to bug C). Run both, expect different findings, don't be surprised when they don't overlap much.
---
Independent editorial perspective — not an official AWS or speaker statement. Designed for executives evaluating what to brief their teams on next.
Live updates related to this session LIVE
Sourced via Parallel AI Monitor — continuous web watch on 21 topical streams. Updated .
- adaptivesecurity.com Agent safety & prompt injection
AI Governance Strategy: How to Build and Implement a ...
Milliman published a security assessment of AI agents identifying technology vulnerabilities and recommending mitigation through security assessment, red teaming, controlled permissions, monitoring, and layered safeguards. The development is relevant because it reinforces that to
- milliman.com Agent safety & prompt injection
Securing AI agents: assess technology vulnerabilities ...
Milliman published a security assessment of AI agents identifying technology vulnerabilities and recommending mitigation through security assessment, red teaming, controlled permissions, monitoring, and layered safeguards. The development is relevant because it reinforces that to
- csis.org Agent safety & prompt injection
PacTech Pulse: August 2026
Milliman published a security assessment of AI agents identifying technology vulnerabilities and recommending mitigation through security assessment, red teaming, controlled permissions, monitoring, and layered safeguards. The development is relevant because it reinforces that to
- nist.gov high confidence AI agent regulation & policy
AI Agent Standards Initiative | NIST
OWASP released the 'Top 10 for Agentic Applications 2026', establishing the first dedicated security framework for autonomous AI agents to address vulnerabilities and risks associated with agentic AI systems.
- nytimes.com Agent safety & prompt injection
The Only Way to Keep the World Safe From A.I.
Milliman published a security assessment of AI agents identifying technology vulnerabilities and recommending mitigation through security assessment, red teaming, controlled permissions, monitoring, and layered safeguards. The development is relevant because it reinforces that to
External links matched to this session via topic relevance. The KB does not endorse third-party content; verify before citing.