Software & Apps

News Round: May 12, 2026 – Secure Code Hero, NetSPI, Claude/AWS, Sembi

Secure Code Hero in partnership with AWS, introduces Amazon Bedrock AI Learning Modules

Secure Code Warrior announced that it has signed a partnership agreement with Amazon Web Services (AWS), and introduced new interactive, hands-on modules now available within the Secure Code Warrior platform.

The new modules enable developers and engineers to create Secure by Design practices, maintain continuous risk awareness, and implement safe operating practices for Amazon Bedrock, a platform for building productive AI applications and agents at production scale.

Secure Code Warrior’s modules and tasks focus on securing infrastructure such as Amazon Bedrock code using Terraform. These secure Bedrock code modules help developers understand and mitigate risks unique to AI and LLM-based applications – including rapid injection, excessive agency, insufficient logging, and information exposure. The new content includes 4 Code Labs, 4 AI Challenges, and 1 Walkthrough Mission, giving developers a controlled, direct exposure to these risks in interactive environments.

“Software development is fueled by productivity and AI technology at an unprecedented rate, and this strategic partnership could not come at a more important time for both security leaders and future-oriented developers,” said Pieter Danhieux, CEO and Founder of Secure Code Warrior. “As organizations continue to use productive AI systems and tools, a natural level of risk is introduced – but this risk is greatly increased when developers are not properly educated about the tools and platforms they use. Developers need more than theoretical guidance; they need practical knowledge in identifying and mitigating real-world threats. By entering this SCA through AWS teams to train AWS teams to educate AWS teams to bring Amazon hands to face each other with confidence AI vulnerabilities and red flags to be able to automatically build secure AI applications.”

NetSPI introduces AI-powered Continuous Pentesting to help organizations verify and mitigate risk as attack surfaces rapidly evolve.

Penetration testing provider NetSPI has announced the launch of its AI-powered Continuous Pentesting offerings, designed to help organizations continuously identify, validate and mitigate vulnerabilities.

Organizations face a growing number of potential entry points as new Internet-facing services, including cloud assets, applications, APIs, and AI-centric assets, are introduced. Each deployment can create a new vulnerability, making it difficult for security teams to maintain a clear view of exposure without continuous, validated insight.

NetSPI’s Continuous Pentesting offerings include Continuous External Penetration Testing, Continuous Cloud Penetration Testing, Model Content Management (MCP) Integrations, and NetSPI’s accelerated AI platform to help teams discover, prioritize and remediate real-world risks as the environment changes.

“The rapidly evolving threat world requires security assessments that provide real-time scale and accuracy, without the noise of thousands of false positives,” said Nabil Hannan, Field CISO at NetSPI. “NetSPI’s powerful continuous penetration testing helps teams identify and validate critical vulnerabilities quickly, allowing them to respond with confidence while focusing on cost-effective vulnerability detection.”

With NetSPI’s Continuous Pentesting offerings, customers can:

  • Continuously discover, identify, and assess exposures in all external environments with Continuous External Intrusion Monitoring
  • Identify cloud misconfigurations, excess permissions, and exposed services as they appear with Continuous Cloud Penetration Testing
  • Validate real risks with continuous testing that simulates attacker behavior
  • Use NetSPI’s MCP integration to automate risk-based workflows and decisions using engagement and vulnerability data.
  • Access findings through NetSPI’s modern, centralized platform with clear, actionable remediation recommendations

Claude Platform is now available on AWS

The Claude Platform on AWS is now generally available, providing a new way for AWS customers to access the full set of Claude Platform features with AWS authentication, billing, and retirement commitments. Claude is also always available on Amazon Bedrock, where AWS is the data processor.

Starting today, Claude Platform on AWS customers can deploy agents at scale with Claude Managed Agents, currently in beta. Other features of the platform include an advisor strategy, also in beta, that helps agents consult with the advisor model; web browsing and web downloading; and the ability to run Python code, create visualizations and analyze data directly within API calls. The platform also comes with a Files API for referencing documents and Skills that teach Claude best practices for consistent results, among other features.

Authentication is logged through AWS IAM, audit logging through CloudTrail, and billing with a single AWS invoice that completely waives against existing commitments. Customers use their existing AWS credentials and IAM policies, so teams stay within the tools and permissions they already own.

The Claude Platform on AWS will be available in multiple AWS commercial locations and support global and US regions. Claude Platform for AWS customers also get access to the Claude Console, Anthropic’s development environment for building and testing with Claude. Console includes a fast developer, a fast generator, and testing tools.

Claude Opus 4.7, Sonnet 4.6, and Haiku 4.5 are available, with new models being shipped to the Claude Platform on AWS as they roll out.

The Claude Platform on AWS is available today. To get started, visit the Claude Platform on AWS or check out the documentation.

Sembi publishes the first Software Quality Pulse report

Sembi today released its first-ever Software Quality Pulse report, a global study that examines how organizations are managing software quality, testing, and security in the age of AI. The report is an extended continuation of TestRail’s previous Software Testing and Quality reports.

“Over the past year, we’ve all seen how quickly AI is changing the pace of software development,” said Christian Beatty, vice president at Sembi. “Teams are moving faster than ever, but that speed is putting real pressure on how quality and risk are managed. Our research shows how difficult it is to keep testing, security, and delivery aligned.”

Among the key findings was that responding organizations reported that 53% of their codes were generated or assisted. This coincides with more than a third of respondents saying their demand for testing has increased significantly. QA teams also report that 57% of their testing is automated, but less than 2% of organizations say their QA tools are fully integrated within their DevOps pipelines. This contributes to different workflows and limits the impact of automation.

The findings of the Software Quality Pulse Report point to a clear need for organizations to adopt “integrated quality operations,” where testing, security, and development are integrated within an intelligence-driven system. As software systems become more powerful and AI-driven, organizations can no longer rely on manual methods. Instead, they must align QA and security with shared goals, visibility, and accountability to effectively manage quality and risk at scale.

Leveraging deep expertise across its portfolio, Sembi brings a unique perspective on how modern teams build, test, and secure software at scale, and how those processes are evolving in response to AI-driven advancements. The Software Pulse Report highlights both the challenges organizations face today and the direction the industry must take to manage quality and risk in the next phase of software development.

The full Software Pulse quality report is available now as a free download here.

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to top button