AWS says ‘frontier agents’ are here – and they’re going to transform software development
A new class of AI agents promises days of autonomous work and added safety checks
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
You are now subscribed
Your newsletter sign-up was successful
AWS has unveiled a set of powerful new “frontier agents” , which the hyperscaler said marks a step change in the potential of agentic AI technology and the automation of far more complex tasks.
Frontier agents aren’t your typical AI agent working away in the background, automating tasks and dealing with customer service queries. As journalists were told at a pre-briefing ahead of the annual re:Invent conference, they’re a “new class” of agent capable of working fully autonomously for hours or days without intervention.
These agents are highly scalable, self-learning, and represent the next iteration of the technology, according to the hyperscaler.
To mark its first foray on this front, AWS has launched three new frontier agents, which it said are primed to fundamentally transform software development. The company’s Kiro coding service, for example, is getting a big update with an agentic twist, dubbed Kiro Autonomous Agent.
Speaking to ITPro ahead of the event, David Yanacek, senior principal engineer for agentic AI at AWS, said these new capabilities will prove vital in helping developer teams speed up production in a safe and secure manner.
“These act as an extension to your team, more so than a tool for developers,” he said. “So we've started this category of what we call frontier agents. We've started by releasing three software development lifecycle related agents.”
According to AWS, the Kiro Autonomous Agent “maintains persistent context across a range of sessions,” meaning it’s lingering in the background learning from human processes.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
While this appears similar to what one would consider a ‘traditional’ AI agent, this new class tracks human activity to improve continually, learning pull requests and providing users with feedback.
The agent comes with a range of capabilities, such as triaging bugs and improving code coverage, the company told assembled media.
“You can ask it questions, describe a task, and assign tasks in your backlog directly from GitHub,” AWS explained in a statement. Thereafter, the agent will “independently figure out” how to complete the task and share recommendations for changes, potential edits or pull requests.“
Security agents target safer software
Elsewhere, Yanacek told ITPro the new AWS Security Agent aims to drive the development of safer, more secure software.
According to AWS, the agent “embeds deep security expertise throughout the development lifecycle” by proactively reviewing design documents and scanning pull requests, comparing them to common vulnerabilities and in-house security requirements.
The launch of this frontier agent represents a step change in software development, according to Yanecek, addressing long-standing security-related issues and alignment between developer and security teams. The agent can perform penetration testing to probe for security vulnerabilities, for example, turning what was previously a laborious manual process into an “on-demand capability”.
“If you're a security team, you want to make sure that all of the teams in your organization are doing things in a secure way, ultimately, and so you want them to be penetration testing code, the changes that they make, the systems that they're building, that's an expensive thing to do,” he explained.
“It takes a lot of time and a lot of setup and execution,” Yanacek added. “Sometimes teams only get to practice only their most critical systems, because it just takes so much time.”
One AWS customer that’s already used the agent, photo-sharing firm SmugMug, was able to conduct penetration testing on multiple applications within the space of hours, rather than days, Yanecek told ITPro.
In simplifying and streamlining this aspect of the development lifecycle, agents are reducing manual toil and freeing up developers to focus on more critical tasks, he added.
“Now we've taken pen test time from weeks to hours, we can just cover more ground, so we can test more changes as they're going through than you could in practice before.”
DevOps gets the agentic treatment
The third and final frontier agent unveiled by AWS today, the AWS DevOps Agent, completes the agentic treatment for the SDLC. This tool aims to streamline DevOps practices, again with a focus on reducing toil for developers.
Similar to the security agent, this has a deep knowledge of user IT estates and applications, identifying relationships between areas such as observability tools, code repositories, and CI/CD pipelines.
It achieves this through mapping application resources, according to AWS, which enables the agent to rapidly respond to failures or bugs that often cause developers headaches.
“The DevOps agent works autonomously when there are alerts or things that will engage a human either in real time or later,” he explained. “It will do root cause incident management, come up with a safe mitigation plan, and shows all of its work along the way.”
Yanacek added that the agent will be proactive and continuously improve, studying previous incidents and identifying potential future issues.
“So it will find things around, maybe cost optimization of infrastructure, saying ‘hey, these are running underutilized’, or, ‘hey, your time to detect has been poor over time’,” he explained.
AWS has tracked an estimated root cause identification rate of around 86% using the agent to date, Yanacek told ITPro. Customers such as the Commonwealth Bank of Australia found that the agent was able to identify the root cause of software failure in just 15 minutes.
“It takes hours for this type of incident [to be identified] that they threw at it to try it out,” he noted. “So we’re seeing success with that.”
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- AWS re:Invent 2025: All the news, updates, and announcements live from Las Vegas
- AWS targets IT modernization gains with new agentic AI features in Transform
- Microsoft's new Agent 365 platform is a one-stop shop for deploying, securing, and keeping tabs on AI agents

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.
He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.
For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.
-
What is model collapse and why is it a risk for enterprise AI?In-depth Model collapse is a nightmare for AI companies and users, with AI models trained on AI data losing quality with each generation
-
Developers are slacking on AI-generated code checksNews While organizations are aware of the risks, many are spending little time or effort on tracking artifact versions, origins, and security attestations
-
Developers are slacking on AI-generated code safety – here's why it could come back to haunt themNews While organizations are aware of the risks, many are spending little time or effort on tracking artifact versions, origins, and security attestations
-
Four things you need to know about GitHub's AI model training policy – including how to opt outNews Users of certain GitHub Copilot plans will have interaction data used to train AI models, but can opt out
-
'AI doesn't solve the burnout problem. If anything, it amplifies it': AI coding tools might supercharge software development, but working at 'machine speed' has a big impact on developersNews Developers using AI coding tools are shipping products faster, but velocity is creating cracks across the delivery pipeline
-
‘I hope there's a world where AI is is complementary to humans’: Workday CEO vows to support HR workers as Sana integration automates more processes than ever beforeNews Sana from Workday seeks to bring agentic AI to Workday’s systems and beyond with natural language input and third-party connectors
-
‘AI tools are now able to transcend their initial training’: Researchers taught GPT-5 to learn an obscure programming language on its ownNews OpenAI’s GPT-5 learned to code in Idris despite a lack of available data, baffling researchers
-
‘You need those experts to even define what these transformations are’: COBOL developers will always be needed, even as AI takes the lead on modernization projectsNews While AI might help speed up mainframe modernization, an AWS executive tells ITPro that COBOL experts remain crucial and aren't at risk of losing out to the technology.
-
Zoom users can now create their own custom AI agentsNews The workplace collaboration giant is going all in on "agentic AI orchestration"
-
Microsoft CEO Satya Nadella says 'anyone can be a software developer' with AI, but skills and experience are still vitalNews AI will cause job losses in software development, Nadella admitted, but claimed many will reskill and adapt to new ways of working