AWS Continuum Pricing
Overview
AWS Continuum discovers, prioritizes, validates, and remediates security risks across the software lifecycle, at machine speed and within the guardrails you define. Before code ships, it helps you with on-demand penetration testing and finding risks in your designs and code. Once your systems are running, it decides which risks matter to your business, proves which are exploitable, and drives toward a fix. AWS Continuum pricing is pay-as-you-go with no upfront costs or minimum fees. Pricing is described below for each capability: Continuum for code vulnerabilities and Continuum for penetration testing.
Continuum for code vulnerabilities
Continuum for code vulnerabilities continuously addresses the full lifecycle of a code vulnerability at machine speed, from discovery through remediation.
There are no upfront costs or minimum fees. You pay a monthly context fee for the codebase Continuum protects and a usage-based inference fee for the security work Continuum performs. Costs scale with the size of your codebase and the volume of security work, so you pay in proportion to the value delivered.
AWS harnesses multiple frontier cyber models on your behalf, selecting the right model for each task, so you get validated, context-aware findings without procuring model access or building your own scanning pipeline. Your applicable AWS pricing benefits apply to Continuum usage.
Continuum for code vulnerabilities uses two pricing dimensions: a monthly context fee based on the lines of code Continuum helps protect, and a usage-based inference fee for the security work Continuum performs.
Continuum for penetration testing
You pay only for the task-hours spent testing your application. One simple pricing applies to all vulnerability types with no long-term commitment.
Task-hours scale naturally with your needs, whether you're testing a simple app or a complex enterprise system. Testing duration is determined by application complexity, penetration test scope, size, and configuration, helping you get comprehensive coverage tailored to your specific requirements.
What counts as a task-hour
A task represents active work performed by AWS Continuum during a penetration test. Task-hours reflect the total cumulative time across all security testing tasks combined. Because multiple tasks run concurrently during a pentest, the total billable task-hours will typically exceed the actual run time or test duration you observe.
Free trial
Continuum for penetration testing is included in the AWS Free Tier plan for new AWS customers. New Continuum for penetration testing customers receive a 2-month free trial starting with their first penetration test run. Each trial month includes up to 400 penetration testing task-hours. Standard pay-as-you-go pricing applies for usage beyond these limits and after your trial ends.
Continuum for code vulnerabilities pricing
Context fee
The context fee reflects the cost of building and maintaining the security graph across your code, cloud configurations, and business context. It is a fixed monthly charge, billed through the ContinuumContext-Code dimension as a proxy for the size and complexity of the context Continuum maintains. Rates decline progressively as your environment grows.
|
Monthly protected lines of code
|
Rate per 1 million lines of code
|
|---|---|
|
First 10 million
|
$200 |
|
Next 90 million
|
$180 |
|
Above 100 million through 1 billion
|
$160 |
|
Above 1 billion through 10 billion
|
$130 |
|
Above 10 billion
|
$100 |
Inference fee
You pay for the security work Continuum performs through Continuum inference units, billed through the ContinuumInference dimension. Continuum selects and blends the right models for each task behind the scenes, so you see a single unit rather than individual model charges.
|
Unit
|
Price per CIU
|
|---|---|
|
Per Continuum inference unit (CIU)
|
$10 |
Pricing examples
The following examples illustrate how AWS Continuum for code vulnerabilities charges are calculated for codebase scenarios. All examples assume standard pay-as-you-go pricing.
Example 1: Small-size codebase
A team protects 1 million lines of code, and Continuum processes 100 vulnerabilities in the month. This example assumes an average of 1 Continuum inference unit per vulnerability. Actual inference varies with the work each vulnerability requires.
Context fee: 1 million lines at $200 per 1 million = $200
Inference fee: 100 vulnerabilities x 1 unit x $10 per unit = $1,000
Estimated monthly total: $1,200
Example 2: Mid-size codebase
A development team protects 10 million lines of code, and Continuum processes 1,000 vulnerabilities in the month. This lighter-workload example assumes an average of 1 Continuum inference unit per vulnerability. Actual inference varies with the work each vulnerability requires.
Context fee: 10 million lines at $200 per 1 million = $2,000
Inference fee: 1,000 vulnerabilities x 1 unit x $10 per unit = $10,000
Estimated monthly total: $12,000
Example 3: Enterprise codebase
An enterprise protects 100 million lines of code, and Continuum processes 10,000 vulnerabilities in the month. This higher-complexity example assumes an average of 2 Continuum inference units per vulnerability. Actual inference varies with the work each vulnerability requires.
Context fee: $200 per 1 million for the first 10 million ($2,000) plus $180 per 1 million for the next 90 million ($16,200) = $18,200
Inference fee: 10,000 vulnerabilities x 2 units x $10 per unit = $200,000
Estimated monthly total: $218,200
Continuum for penetration testing pricing
|
Pricing model
|
Pay-as-you-go. No upfront costs or minimum fees.
|
|---|---|
|
Rate
|
$50.00 per task-hour |
|
Billing Unit
|
Per task-hour (metered per second). Partial seconds are billed proportionally. |
|
What counts as a task-hour
|
A task represents active work performed by AWS Continuum during a penetration test. Task-hours reflect the total cumulative time across all security testing tasks combined. Because multiple tasks run concurrently during a pentest, the total billable task-hours will typically exceed the actual run time or test duration you observe. |
|
|
Continuum for penetration testing does not charge users for the first three revalidations per finding. Additional revalidations are charged based on task-hour duration. |
Pricing Examples
The following examples illustrate how Continuum for penetration testing charges are calculated for common penetration testing scenarios. All examples assume standard pay-as-you-go pricing at $50.00 per task-hour with per-second metering.
Example 1
A development team runs a penetration test on a new API. Continuum for penetration testing runs multiple tasks in parallel, completing a comprehensive test in approximately 1 hour while consuming 3 hours, 27 minutes, 45 seconds of cumulative task-hours.
Billing Calculation:
Total seconds: (3 × 3,600) + (27 × 60) + 45 = 12,465 seconds
Task-hours: 12,465 ÷ 3,600 = 3.4625 hours
Total charge: 3.4625 hours × $50/hour = $173.13
Example 2
A security team performs a routine monthly penetration test against a customer-facing e-commerce application. Continuum for penetration testing runs multiple tasks in parallel, completing a comprehensive test in 4 hours while consuming 24 hours of cumulative task-hours.
Billing Calculation: Task hours: 24 Total charge: 24 × $50/task-hour = $1,200.00
Example 3
A security team conducts a comprehensive penetration test against a complex enterprise SaaS service ahead of a major product release. Continuum for penetration testing runs multiple tasks in parallel, completing a pen test in 9 hours, 30 minutes while consuming 31 hours, 15 minutes, 30 seconds of cumulative task-hours.
Billing Calculation:
Total seconds: (31 × 3,600) + (15 × 60) + 30 = 112,530 seconds
Total task-hours: 112,530 ÷ 3,600 = 31.2583 task-hours
Total charge: 31.2583 hours × $50/task-hour = $1,562.92
Did you find what you were looking for today?
Let us know so we can improve the quality of the content on our pages