AWS Security Hub vs Logz.io comparison

Read 8 Logz.io reviews

652 Views
455 Comparison Views

90% willing to recommend

AWS Security Hub

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Logz.io and AWS Security Hub compete in the security management platform category. AWS Security Hub seems to have the upper hand due to its richer feature set and integration capabilities, despite higher costs.

Features: Logz.io offers strong monitoring and analytics capabilities, ease of integrating log data from various sources, and accessible pricing. AWS Security Hub provides extensive integration with AWS services, automated compliance checks, and a comprehensive security feature set.

Room for Improvement: Logz.io could improve alert management, make the configuration process more intuitive, and enhance dashboard customization. AWS Security Hub requires better dashboard customization, more detailed documentation, and flexibility in integration options.

Ease of Deployment and Customer Service: Logz.io is praised for its straightforward deployment process and responsive customer support. AWS Security Hub is comprehensive but complex in deployment due to its integration with multiple AWS services, though it benefits from detailed support documentation.

Pricing and ROI: Logz.io offers competitive pricing and transparent costs, making it cost-effective for smaller to mid-sized enterprises. AWS Security Hub, despite higher initial costs, delivers significant ROI for large organizations needing sophisticated security management across extensive AWS environments.

To learn more, read our detailed AWS Security Hub vs. Logz.io Report (Updated: October 2024).

AWS Security Hub vs. Logz.io

October 2024

Download the complete report

Helped 814,649 peers since 2012

Categories and Ranking

AWS Security Hub

Ranking in Security Information and Event Management (SIEM)

7th

Average Rating

7.6

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (5th), Cloud Security Posture Management (CSPM) (14th)

Logz.io

Ranking in Security Information and Event Management (SIEM)

25th

Average Rating

8.2

Number of Reviews

Ranking in other categories

Log Management (21st)

Mindshare comparison

As of November 2024, in the Security Information and Event Management (SIEM) category, the mindshare of AWS Security Hub is 4.5%, down from 4.6% compared to the previous year. The mindshare of Logz.io is 0.3%, down from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

CobusFrey

Product Owner Global Cloud at Tyme

Apr 8, 2024

Not only does it easily integrate with third-party tools but also allows auto synchronization of logs

AWS Security Hub has advanced quite a bit over the last couple of years. The features are quite rich now. Before purchasing, one should develop an understanding of the product. I believe AWS Security Hub is one of the most friendly solutions for integration with third-party tools. I find the integration of AWS Security Hub to be the easiest with tools from Microsoft and a bit difficult with Google solutions. AWS Security Hub is compliant in many different ways. The development business I am part of is SOC compliant for AWS Security Hub, while the banks our organization works with have been PCI compliant for AWS Security Hub for three years. I would definitely recommend AWS Security Hub to others, yet I would also inquire about their purpose and knowledge of cloud solutions. If you know how to use AWS Security Hub, it can be a great solution to work with. The solution is more suitable for people working in the cloud instead of on-premises. I would rate AWS Security Hub a nine out of ten.

Read full review

Derrick Brockel

Senior Manager of Operations at a comms service provider with 10,001+ employees

Dec 12, 2023

The solution is a consistent logging platform that provides excellent query mechanisms

We can query a lot of data points and build dashboards. The vendor is good at adjusting their models. Most companies want us to forecast our yearly use and pay it upfront on day one. With Logz.io, we commit to use 14 TB in a year. However, they measure us every month and give us a monthly bill. Depending on our monthly usage, we pay for 14 TB divided by 12 months or a little extra. It's a little bit more like AWS. Other solutions do not do it. They want their money upfront. We really like the dashboards. We have 36 sub-accounts. Each sub-account is an app, and we could put restrictions on that app. Previously, there were capacity restrictions on the sub-accounts. If we have a sub-account of 1 TB and use only 100 GB, we waste 900 GB that day. We could not share it between sub-accounts. Now, they provide an overhead volume. We do a reserve, and any sub-account could use anything over the reserve. It utilizes our footprint better.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Finding out if your infrastructure is secure is a valuable feature."

"Easily integrates with third-party tools"

"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"I like that AWS Security Hub currently has several good features, around four or five. The technical support for AWS Security Hub is also responsive."

"It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."

"The solution shows us our compliance score."

"The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."

More AWS Security Hub pros

"The tool is simple to setup where it is just plug and play. The tool is reliable and we never had any performance issues."

"The other nice thing about Logz.io is their team. When it comes to onboarding, their support is incredibly proactive. They bring the brand experience from a customer services perspective because their team is always there to help you refine filters and tweak dashboards. That is really a useful thing to have. Their engagement is really supportive."

"The query mechanism for response codes and application health is valuable."

"The visualizations in Kibana are the most valuable feature. It's much more convenient to have a visualization of logs. We can see status really clearly and very fast, with just a couple of clicks."

"InsightOne is the main reason why we use LogMeIn. This is mostly because of log data that we are pushing tools and logs in general."

"It is massively useful and great for testing. We can just go, find logs, and attach them easily. It has a very quick lookup. Whereas, before we would have to go, dig around, and find the server that the logs were connected to, then go to the server, download the log, and attach it. Now, we can just go straight to this solution, type in the log ID and server ID, and obtain the information that we want."

"We use the product for log collection and monitoring."

"We use the tool to track the dev and production environment."

Cons

"The solution lacks self-sufficiency."

"Adding SIEM features would be beneficial because of the limited customization of AWS Security Hub."

"Whenever my team gets some alarms from the central team, my team needs to initiate whether it's a real or false trigger. The central team needs to keep adjusting to the parameters or at least the concerned IPs, whether it's really from the company's pool of IPs, so the trigger process can be improved. In the next release of AWS Security Hub, I'd like a better dashboard that could result in better alert visibility."

"AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."

"AWS Security Hub's configuration and integration are areas where it lacks and needs to improve."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

"It is not flexible for multi-cloud environments."

"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."

More AWS Security Hub cons

"Capacity planning could be a little bit of a struggle."

"When it comes to reducing our troubleshooting time, it depends. When there are no bugs in Logz.io, it reduces troubleshooting by 5 to 10 percent. When there are bugs, it increases our troubleshooting time by 200 percent or more."

"The price can be cheaper and they should have better monitoring."

"I would like them to improve how they manage releases. Some of our integrations integrate specifically with set versions. Logz.io occasionally releases an update that might break that integration. On one occasion, we found out a little bit too late, then we had to roll it back."

"The product needs improvement from a filtering perspective."

"The solution needs to expand its access control and make it accessible through API."

"I would like granularity on alerting so we can get tentative alerts and major alerts, then break it down between the two."

"The solution needs to improve its data retention. It should be greater than seven days. The product needs to improve its documentation as well."

Pricing and Cost Advice

"The pricing is fine. It is not an expensive tool."

"Security Hub is not an expensive solution."

"The price of the solution is not very competitive but it is reasonable."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of AWS Security Hub is average compared to other solutions."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"AWS Security Hub's pricing is pretty reasonable."

"The product's pricing is cheaper than other solutions."

"You pay for what you need, and that is a good model. They are also quite happy to talk to you about your uses and your use case. They will even go as far as suggesting things that you don't need to do in order to save you money. At one point, I was quite surprised at how cheap it could be if we wanted it to be or how much they would help us manage our costs."

"The tool is an open source product."

"The product is a little expensive."

"At the time it was set up, we thought Logz.io was very reasonable for what we were getting in terms of how much time and hosting costs it was saving us, because you don't have to run the servers for it anymore."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

814,649 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

Government

Computer Software Company

16%

Financial Services Firm

11%

Healthcare Company

11%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

What needs improvement with AWS Security Hub?

Many findings are too generic or irrelevant to the environment, which can lead to false positives. It can be challenging to suppress or turn off these findings. Turning specific findings on or off ...

What do you like most about Logz.io?

The query mechanism for response codes and application health is valuable.

What is your experience regarding pricing and costs for Logz.io?

The product is a little expensive. We're pushing 17 TB. It costs us one and a half million dollars a year.

What needs improvement with Logz.io?

Capacity planning could be a little bit of a struggle. The product must add some AI capabilities to learn from previous behaviors. Instead of us setting thresholds, the tool should learn the thresh...

Microsoft Sentinel vs AWS Security Hub

Comparisons

Compared 38% of the time

Wiz vs AWS Security Hub

Compared 12% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 11% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 6% of the time

Google Chronicle Suite vs AWS Security Hub

Compared 6% of the time

More AWS Security Hub Competitors

Datadog vs Logz.io

Compared 37% of the time

Coralogix vs Logz.io

Compared 23% of the time

Wazuh vs Logz.io

Compared 11% of the time

Grafana Loki vs Logz.io

Compared 11% of the time

Graylog vs Logz.io

Compared 9% of the time

More Logz.io Competitors

Product Reports

Download AWS Security Hub product report

AWS Security Hub

November 2024

Download Logz.io product report

October 2024

Also Known As

SQRRL

Logz

Learn More

Amazon Web Services (AWS)

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Logz.io is a leading cloud-native observability platform that enables engineers to use the best open source tools in the market without the complexity of operating, managing, and scaling them. Logz.io offers four products: Log Management built on ELK, Infrastructure Monitoring based on Prometheus, Distributed Tracing based on Jaeger, and an ELK-based Cloud SIEM. These are offered as fully managed, integrated cloud services designed to help engineers monitor, troubleshoot and secure their distributed cloud workloads more effectively. Engineering driven companies like Siemens, Unity and ZipRecruiter use Logz.io to simplify monitoring and security workflows, increasing developer productivity, reducing time to resolve issues, and increasing the performance and security of their mission-critical applications.

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Dish Network, The Economist, Forbes, Holler, Kenshoo, OneSpan, Siemens, Sisense, Unity, ZipRecruiter