The use case of AWS Security Hub is to manage the compliance part. It is a CSPM tool that helps you understand the compliance level of your infrastructure in the cloud. The tool gives you a score considering the levels of compliance you follow.
Manager Cloud Security at Hitachi Systems, Ltd.
An easy-to-manage tool that needs to make more compliances available for its users
Pros and Cons
- "The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."
- "From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool."
What is our primary use case?
What is most valuable?
The most valuable feature of the solution stems from the fact that it is easy to manage, and a user of AWS does not have to log in to different consoles. If you have an AWS infrastructure, then it works fine. If you have multiple cloud infrastructures in your organization that may consist of cloud services from AWS, Azure, or GCP, then the tool may not be that effective since it can be described as a native tool for AWS.
What needs improvement?
From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool. It should be made possible to integrate some of the other tools with AWS Security Hub so that it can give you complete visibility of the product.
AWS Security Hub needs a lot of improvement since it is a native tool meant for AWS products only. For providing compliance, a number of tools are available in the market to take care of the protection part.
In the future, AWS needs to implement a single dashboard and make different kinds of modules available. To use it as a CSPM tool, you must go with AWS Security Hub, Amazon Inspector, and AWS Config. AWS Security Hub needs to introduce a single dashboard that allows a security person to go and log in, see the status, and take action if necessary.
For how long have I used the solution?
I have been using AWS Security Hub for three to four years. I work as an integrator, and my company has partnerships with many companies involved in OEM tools.
Buyer's Guide
AWS Security Hub
October 2026
Learn what your peers think about AWS Security Hub. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
916,056 professionals have used our research since 2012.
What do I think about the stability of the solution?
Stability-wise, I rate the solution a seven out of ten.
What do I think about the scalability of the solution?
It is a scalable solution.
I have implemented AWS Security Hub for five to six customers of our company.
How are customer service and support?
AWS office has two types of support, namely business and standard. If you have opted for standard support, then it will be very complex to connect with the technical staff of AWS. If you have opted for business support, then the technical staff of AWS will connect with you within a minute. Business support is paid support.
How was the initial setup?
The initial setup of AWS Security Hub was straightforward.
The product's deployment process is very easy and can be completed within an hour. As soon as you enable the product, it works. The product doesn't require the user to undergo any other implementation phases since it is a tool that you just have to enable in your environment to make it work across your environment.
The product's deployment process is very easy since you just need to log in to the control before going to Security Hub to enable it. You may enable AWS Security Hub in which account you want to enable.
The solution is deployed on the cloud.
One or two staff members are enough to manage the solution's deployment and maintenance. If you have a bigger environment with thousands of machines, then one or two people are enough to take care of the visibility part of the solution, but the maintenance will require a large number of staff members.
What's my experience with pricing, setup cost, and licensing?
AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use.
What other advice do I have?
If a person only wants a CSPM tool, then they can go with AWS Security Hub. If a person wants the product to be more than just a CSPM tool, then they need to evaluate the solutions available in the market.
I rate the overall tool a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Has efficient vulnerability detection features and an easy initial setup process
Pros and Cons
- "The platform has valuable features for security."
- "It is not flexible for multi-cloud environments."
What is our primary use case?
We use AWS Security Hub for vulnerability or compliance detection.
What is most valuable?
The platform has valuable features for security. It helps in identifying misconfigurations and vulnerabilities and fixing them early.
What needs improvement?
It's a dependent platform. It is not flexible for multi-cloud environments. They should add features for cloud diagnosis to analyze logs from the cloud in a standardized format. Additionally, its integration capabilities with external systems could be improved.
For how long have I used the solution?
I have been working with AWS Security Hub for two years.
How are customer service and support?
The AWS technical support is excellent. They have multiple channels of support.
How would you rate customer service and support?
Positive
How was the initial setup?
The setup is straightforward. The time taken for deployment depends on how many AWS services you are using and the complexity of your environment. But in general, it only takes a few hours. The process involves collecting logs and storing them in CloudVoice.
What's my experience with pricing, setup cost, and licensing?
There are multiple subscription models, like yearly, monthly, and packaged.
What other advice do I have?
I recommend AWS Security Hub to those who build their infrastructure only in the AWS cloud. If you don't want to spend much on adopting a new tool, I will strongly recommend the product.
I rate AWS Security an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
AWS Security Hub
October 2026
Learn what your peers think about AWS Security Hub. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
916,056 professionals have used our research since 2012.
Helps to host SaaS and PaaS applications
Pros and Cons
- "Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."
- "One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."
What is our primary use case?
Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup.
What needs improvement?
One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function.
For how long have I used the solution?
I have been using the solution for the past ten years.
What do I think about the stability of the solution?
The stability is good. The solution is considered one of the most stable and reliable cloud platforms globally among the three major cloud service providers.
What do I think about the scalability of the solution?
The scalability is good. It’s better than any other tool available. We have 1000 users for the solution.
How are customer service and support?
In our organization, we rely on third-party support for our cloud operations. We have a local operations team that works with various suppliers to handle our cloud-related support and maintenance needs.
How was the initial setup?
The initial setup was complex. We need 100 technical staff for deployment.
What other advice do I have?
I would definitely recommend this solution to others who are considering using it. While there might be room for improvement in the future to align with evolving technology trends, it has been a good option for us and meets our current business and technological needs. Overall, I rate the solution an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Chief Information Security Officer at OITI
A stable and scalable cloud-based security management solution that provides security
Pros and Cons
- "Cloudposse is a valuable feature as it guarantees my security."
- "AWS Security Hub's configuration and integration are areas where it lacks and needs to improve."
What is our primary use case?
I have been using the solution for monitoring AWS, and Security Hub helped me view the security of my cloud.
What is most valuable?
Cloudposse is a valuable feature as it guarantees my security.
What needs improvement?
AWS Security Hub's configuration and integration are areas where it lacks and needs to improve.
For how long have I used the solution?
I have been using AWS Security Hub for five years. I am a user of the solution.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
It is a scalable solution.
How was the initial setup?
The initial setup is easy. It requires little to no maintenance. The solution is deployed on the cloud.
What's my experience with pricing, setup cost, and licensing?
The pricing is fine. It is not an expensive tool.
What other advice do I have?
I rate the overall solution an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Manager-Cloud Security Operations at a retailer with 10,001+ employees
Excellent integration features, reliable, and responsive technical support
Pros and Cons
- "AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."
- "AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS."
- "The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."
What is our primary use case?
AWS Security Hub helps us in centralizing all the different types of findings we have. We can view all the vulnerability findings, configuration issues, or security best practices. We have a consolidated view of an AWS account from a security point of view which is very good.
What is most valuable?
AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard.
What needs improvement?
AWS Security Hub could improve by having more integration and flexibility with other cloud security solutions on the market. They have integration with AWS solutions and other commercial solutions but not ones that are open-source. If we have more of an open-source integration availability it would be great.
The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update.
For how long have I used the solution?
I have been using AWS Security Hub for approximately four years.
What do I think about the stability of the solution?
The solution is stable.
How are customer service and support?
The technical support is good in my experience, they have been prompt with their service.
How was the initial setup?
The initial setup is very easy and straightforward.
What's my experience with pricing, setup cost, and licensing?
The price of the solution is not very competitive but it is reasonable.
What other advice do I have?
I rate AWS Security Hub an eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
EMEA Sales Engineer- System Integrators & Service Providers at a computer software company with 10,001+ employees
Provides great detection and real-time alerts; lacks self-sufficiency
Pros and Cons
- "The solution is very good at detection and providing real-time alerts."
- "The solution is not wholly self-sufficient."
What is our primary use case?
I'm a user of this solution and a sales engineer.
What is most valuable?
The solution is very good at detection and providing real-time alerts.
What needs improvement?
I think post-share management can be extended further, closer to the data. The solution is not wholly self-sufficient. It would be great if they could make it a multi-cloud solution.
For how long have I used the solution?
I've been using this solution for one year.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
They provide good technical support.
How was the initial setup?
The initial setup is simple but not overly simple. There is still some work to do there.
What's my experience with pricing, setup cost, and licensing?
I'm satisfied with the pricing.
What other advice do I have?
I would suggest not relying on the cloud provider only. There are other third-party tools that can help with future strategies. Locking into one vendor can create problems and it's a good idea to use security tools from a third party and have multi-hybrid cloud.
I rate the solution seven out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Engineering Manager Technology at Nykaa
Good infrastructure insight, stable, but regional restrictions need lifting
Pros and Cons
- "Finding out if your infrastructure is secure is a valuable feature."
- "This solution is for security posture management for the cloud, showing the security posture of your cloud infrastructure and giving you good insight into whether your infrastructure is secure or not."
- "The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."
What is our primary use case?
This solution is for security posture management for the cloud. It will show the security posture of your cloud infrastructure. It can be used for mapping and it can give you a good insight into whether your infrastructure is secure or not.
What is most valuable?
Finding out if your infrastructure is secure is a valuable feature.
What needs improvement?
The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach.
The product should not be a region restriction product. It should be global. It should give you the visibility of all the instances that you have for one account, be it in one region or many regions. There should be visibility of all the region in one place.
For how long have I used the solution?
I have been using the solution for two years.
What do I think about the stability of the solution?
I had no issues with the stability of the solution.
How are customer service and technical support?
We have contacted the technical team regarding removing the global restrictions in the product. They have advised us that this is in their roadmap for the future. We have worked with them closely on many issues.
What other advice do I have?
I rate AWS Security Hub a seven out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free AWS Security Hub Report and get advice and tips from experienced pros
sharing their opinions.
Updated: October 2026
Product Categories
Cloud Security Posture Management (CSPM) Security Orchestration Automation and Response (SOAR)Popular Comparisons
Datadog
Qualys TotalCloud
Microsoft Defender for Cloud
SentinelOne Singularity Cloud Security
IBM Security QRadar
Prisma Cloud by Palo Alto Networks
Check Point Cloud Firewall (formerly CloudGuard Network Security)
Microsoft Sentinel
Elastic Security
TrendAI Vision One – Cloud Security
Orca Security
VMware Aria Automation
CrowdStrike Falcon Cloud Security
Buyer's Guide
Download our free AWS Security Hub Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which is better - Azure Sentinel or AWS Security Hub?
- AWS Cloud Security Posture tool - has anyone used either Wiz or Ermetic cloud security products and can compare them to AWS Security Hub?
- What are your best practices for Identity and Access Management (IAM) in the Cloud?
- What is the minimum security features set required for Cloud Backup and Storage Software?
- What are your best practices to achieve DevOps security in the cloud?
- Is there a single tool to unify cloud compliance reporting?
- What is Unified Cloud Security? Can you define the scope and use cases of the term?
- What is an Application Security Posture Management (ASPM)?
- Which solutions offer a preventive, proactive approach to cloud security posture management?
- What are the potential PaaS attack vectors in the cloud?

















