AWS Security Agent Now Supports Email-Based MFA for Penetration Testing
AWS, Thursday, August 6th, 2026
AWS Security Agent extends automated penetration testing to applications using email-based MFA.
AWS Security Agent, now part of AWS Continuum, can now perform penetration testing of applications that use email-based multi-factor authentication in their login flow.
Previously, applications requiring one-time codes or verification links delivered by email were out of scope for automated penetration testing.
The agent can now complete those authentication flows and test the application behind them. This closes a common coverage gap, since email-based MFA is widespread in enterprise applications.