Engagement Overview
Arnica builds application-security software for development teams. The Tactical Edge engagement focused on connecting security events, application context, and remediation workflows within an AWS architecture.
The Challenge
- Bring findings from different scanning and development workflows into a consistent processing path.
- Help reviewers understand a finding's application context before choosing a remediation.
- Connect model-assisted recommendations to existing developer workflows with traceable decisions.
The Approach
- Use event-driven processing to connect incoming security findings with the application's existing services.
- Organize approved security context for retrieval alongside each finding.
- Keep remediation recommendations, reviewer decisions, and execution boundaries visible to operators.
What Changed
The engagement connected security-event processing, contextual analysis, and remediation workflows around the existing product.
Build on This with AWS
For organizations facing similar challenges, Tactical Edge can connect Amazon Bedrock and AgentCore to turn trusted information into useful answers and actions.
A new vulnerability finding could trigger retrieval of the affected component, approved remediation guidance, and relevant application context. An agent could prepare a proposed fix and a review summary linked to that evidence.
| Service | How it helps |
|---|---|
| Amazon Bedrock | Explain a finding and draft remediation guidance from the supplied application context. |
| Bedrock Knowledge Bases | Retrieve approved security guidance and repository documentation with source references. |
| AgentCore Runtime and Gateway | Read finding details, prepare an issue, or open a proposed change through narrowly scoped tools. |
| AWS workflow services | Route security events with EventBridge and Lambda, and retain workflow state and review decisions in Step Functions or the application's control plane. |
AgentCore connects agents to approved application tools and provides execution traces. Bedrock Knowledge Bases grounds answers in permitted source material, while Guardrails adds content and sensitive-information checks.
Tactical Edge maps these capabilities to the team's access rules, review steps, and operating requirements.
Built for Daily Operations
Remediation stays within the team's repository permissions, code review, automated tests, and deployment process, so developers retain control over changes to their applications.
Measure finding relevance, recommendation accuracy, reviewer acceptance, time to a reviewed fix, and any regressions introduced by accepted changes.