Inside AWS Security Agent: A multi-agent architecture for automated penetration testing

AWS describes a multi-agent, LLM-driven penetration testing system integrated into AWS Security Agent that automates authentication, baseline scanning, managed and guided exploration, specialized swarm workers, and assertion-based validation to produce validated vulnerability reports. The post details architecture, validation methods, evaluation on the CVE Bench dataset with attack success rates, and operational challenges such as non-determinism and compute budgeting.