AWS Security Hub CSPM pricing
3 plans read from aws.amazon.com
Security Hub EssentialsPrice not published Pay-as-you-go; resource unit / mo; prorated by monitored timePer-resource charges apply to EC2 instances, ECR container images, Lambda functions, and IAM users/roles; other monitored resources are included; AWS and Azure coverage Read 4 Oct 2026 · aws.amazon.com
Security Hub Extended PlanPrice not published Pay-as-you-go per partner; no upfront commitmentsEssentials must be enabled first; charges are additional to Essentials; 23 curated partner solutions across 10 security categories Read 4 Oct 2026 · aws.amazon.com
Threat Analytics + Lambda Code Scanning add-onsPrice not published Tiered by volume; in addition to EssentialsThreat Analytics covers CloudTrail management events, S3 data events, VPC Flow Logs, DNS query logs, and EKS audit logs; Lambda code scanning scans on deployment and periodically Read 4 Oct 2026 · aws.amazon.com
In short
- AWS Security Hub CSPM has a free plan (Security Hub Essentials).
- A free trial is offered.
What the alternatives costAll alternatives →
| Tool | From | Free plan | Free trial |
|---|---|---|---|
| Aikido CSPM | $300/mo | Yes | Yes |
| Mondoo CSPM | — | Yes | No |
| Microsoft Defender for Business | $0.25/mo | No | Yes |
| Powerpipe | — | Yes | No |
| FireMon | $200/mo | No | Yes |
| Cloudanix | $3.49/mo | No | Yes |
| Oracle Cloud Infrastructure Secret Management | — | Yes | No |
| Sysdig Secure | $20/mo | No | No |