Agent Index by Heritage Services
Submit / Claim
Home / Agents / Amazon Q Developer security scanning

Amazon Q Developer security scanning

Vendor: Amazon Web Services · HQ: United States · Category: Code security · Security

Last verified · Added · 3 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Amazon Q Developer can review a file, a git diff or a project for security and quality issues. AWS docs list SAST, secrets detection, IaC issues, code quality, deployment risks and software composition analysis, powered by generative AI and Amazon Q detectors. Some findings include a suggested in-IDE fix. AWS has announced end of support for Amazon Q Developer IDE plugins on 30 April 2027, pointing users to Kiro for similar IDE capabilities; console and other Q Developer surfaces remain documented separately. This listing is the security-scanning/review capability, not a dedicated AppSec platform.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Free Tier with monthly limits; Amazon Q Developer Pro is $19 per user/month on aws.amazon.com/q/developer/pricing. Security scanning is a capability of those tiers, not a separately priced SKU on that page.

India relevance

IDE/project scanning for vulnerabilities and secrets can support CERT-In-oriented secure development. AWS does not market a CERT-In module for this feature.

Tasks

appsecsastsecrets detectionscaiacremediation

Sources

  1. docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/code-reviews.html (primary)
  2. aws.amazon.com/blogs/devops/code-security-scanning-with-amazon-q-developer/
  3. aws.amazon.com/q/developer/pricing/

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Narrow by region

This listing’s HQ country is United States. That is a starting point only — choose any published country page.

United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in the United States (195)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

  • AI code security agents — 33 verified listings (Application security scanning, suggested or automated code fixes, and pull-request security review)

Compare Amazon Q Developer security scanning with

Alternatives

  • Aikido AI AutoFix — Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ.
  • AISLE (autonomous vulnerability discovery, triage and verified-fix agents) — Prague-headquartered AI code-security platform in which thousands of agents analyse a codebase in parallel for exploitable vulnerabilities, fix agents write patches, and agentic verification builds the repo and runs tests before opening a pull request for human merge. October 2026 added agent-driven proof of exploitability against running web apps and APIs. Cohere signed a letter of intent to acquire AISLE on Oct 15, 2026.
  • Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) — German AppSec product from Düsseldorf: a team of agents audits repositories (SAST, secrets, SCA, IaC, CI/CD) and cloud accounts, triages signals so only confirmed findings surface, pentests running apps inside a verified scope with a separate agent reproducing every finding, reviews pull requests with a merge-blocking status check, and opens fix pull requests that run your tests but never merge themselves.
  • Black Duck Signal (agentic AI AppSec) — Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP.
  • Checkmarx One Assist — Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel.
  • Claude Code security review — Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments.

See all Amazon Q Developer security scanning alternatives →

FAQ (from this dataset)

What does Amazon Q Developer security scanning do?

Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes.

How much does Amazon Q Developer security scanning cost?

Free Tier with monthly limits; Amazon Q Developer Pro is $19 per user/month on aws.amazon.com/q/developer/pricing. Security scanning is a capability of those tiers, not a separately priced SKU on that page.

Where is Amazon Web Services headquartered?

United States

What are alternatives to Amazon Q Developer security scanning?

See the Amazon Q Developer security scanning alternatives page for category-sharing listings in relevance order, not a ranking. Amazon Q Developer security scanning alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.