Skip to content
SPECIFICTION
Get listed

AWS Security Hub CSPM

aws.amazon.com

Free trial WebAPI
Visit aws.amazon.com
Spec score 7.8 #14 of 41 in Cloud Security Posture Management Software

Spec sheet

Purpose
AWS Security Hub CSPM checks AWS resources against security best practices and combines findings from AWS security services and partner tools to identify misconfigurations and assess security posture.Read 4 Oct 2026 · aws.amazon.com
Attack path analysis
Security Hub visualizes potential attack paths by mapping how vulnerabilities and misconfigurations could connect to critical resources.Read 4 Oct 2026 · aws.amazon.com
Billing limit
Other AWS security service capabilities not included in Security Hub plans, including remaining GuardDuty and Inspector capabilities, retain their original service billing.Read 4 Oct 2026 · aws.amazon.com
Compliance support
AWS says it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.Read 4 Oct 2026 · aws.amazon.com
Frameworks
Its standards align with AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST.Read 4 Oct 2026 · aws.amazon.com
Included capabilities
The Essentials plan includes findings ingestion and aggregation, Automation Rules, CSPM, several Inspector scanning capabilities, CIS Benchmark Assessments, and a service-linked AWS Config recorder.Read 4 Oct 2026 · aws.amazon.com
Intended customers
AWS says its customers range from startups and enterprises to nonprofits and governments.Read 4 Oct 2026 · aws.amazon.com
Multicloud
Security Hub can extend visibility to Microsoft Azure resources, including virtual machines, container images, Function Apps, and identities.Read 4 Oct 2026 · aws.amazon.com
Partner integrations
The Extended Plan offers curated partner solutions across endpoint, identity, email, network, data, browser, cloud, AI, security operations, and supply chain categories.Read 4 Oct 2026 · aws.amazon.com
Pricing scope
Per-resource pricing applies to EC2 instances, ECR container images, Lambda functions, and IAM users and roles; other monitored resources are included.Read 4 Oct 2026 · aws.amazon.com
Response automation
Security Hub provides automated response workflows to streamline remediation at scale.Read 4 Oct 2026 · aws.amazon.com
Risk prioritization
Security Hub correlates and enriches findings to prioritize critical issues across accounts and AWS Regions, with customizable dashboard widgets and near-real-time risk analytics.Read 4 Oct 2026 · aws.amazon.com
Shared responsibility
AWS states security and compliance are shared responsibilities, with customers responsible for guest operating systems, application software, and configuration of AWS security group firewalls.Read 4 Oct 2026 · aws.amazon.com
Support and procurement
AWS describes Security Hub as offering one consolidated bill, consolidated support, and flexible pricing across AWS and partner solutions.Read 4 Oct 2026 · aws.amazon.com

Plans and prices

Security Hub Essentials Price not published Pay-as-you-go; resource unit / mo; prorated by monitored time Per-resource charges apply to EC2 instances, ECR container images, Lambda functions, and IAM users/roles; other monitored resources are included; AWS and Azure coverage Read 4 Oct 2026 · aws.amazon.com
Security Hub Extended Plan Price not published Pay-as-you-go per partner; no upfront commitments Essentials must be enabled first; charges are additional to Essentials; 23 curated partner solutions across 10 security categories Read 4 Oct 2026 · aws.amazon.com
Threat Analytics + Lambda Code Scanning add-ons Price not published Tiered by volume; in addition to Essentials Threat Analytics covers CloudTrail management events, S3 data events, VPC Flow Logs, DNS query logs, and EKS audit logs; Lambda code scanning scans on deployment and periodically Read 4 Oct 2026 · aws.amazon.com

Every AWS Security Hub CSPM plan and price →

Where Specifiction places it

Alternatives to AWS Security Hub CSPMAll alternatives →