AWS Security Hub vs Prisma Cloud by Palo Alto Networks comparison

Amazon Web Services (AWS) and Palo Alto Networks are both solutions in the Cloud Security Posture Management (CSPM) category. Amazon Web Services (AWS) is ranked #13 with an average rating of 7.6, while Palo Alto Networks is ranked #2 with an average rating of 8.5. Amazon Web Services (AWS) holds a 4.1% mindshare in CSPM, compared to Palo Alto Networks’s 11.3% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 98% of Palo Alto Networks users who would recommend it.

AWS Security Hub

Read 26 AWS Security Hub reviews

7,414 Views
3,262 Comparison Views

89% willing to recommend

Prisma Cloud by Palo Alto N...

Read 111 Prisma Cloud by Palo Alto Networks reviews

23,407 Views
13,576 Comparison Views

98% willing to recommend

AWS Security Hub

Prisma Cloud by Palo Alto N...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 26, 2025

Prisma Cloud by Palo Alto Networks and AWS Security Hub compete in the cloud security category, providing solutions to enhance organizations' security postures. Based on user feedback, Prisma Cloud is favored for its comprehensive feature set, while AWS Security Hub excels in seamless AWS integration.

Features: Prisma Cloud offers workload identity creation, application dependency mapping, and robust integration with AWS products, providing comprehensive monitoring. AWS Security Hub is valued for its integration with AWS services, allowing a central dashboard for security management.

Room for Improvement: Users recommend enhancing Prisma Cloud's UI and permission models, simplifying licensing, and integrating the Compute function further. AWS Security Hub could improve real-time capabilities, multi-cloud adaptation, and third-party integration, especially in hybrid environments.

Ease of Deployment and Customer Service: Prisma Cloud supports flexible deployment across hybrid, on-premises, and public cloud environments, with robust support but occasional response delays. AWS Security Hub integrates well with AWS ecosystems but faces challenges in multi-cloud settings. Both are praised for customer service, with Prisma Cloud noted for its structured support, and AWS Security Hub for integration ease.

Pricing and ROI: Prisma Cloud is seen as expensive but justified by its feature set, with licensing complexity noted. AWS Security Hub is considered reasonably priced, especially in AWS-centric environments, with efficient deployment and comprehensive security postures, but costs are harder to justify in non-AWS environments.

To learn more, read our detailed AWS Security Hub vs. Prisma Cloud by Palo Alto Networks Report (Updated: September 2025).

Buyer's Guide

AWS Security Hub vs. Prisma Cloud by Palo Alto Networks

September 2025

Download the complete report

Helped 872,029 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Cloud Security Posture Management (CSPM)

13th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (5th)

Prisma Cloud by Palo Alto N...

Ranking in Cloud Security Posture Management (CSPM)

2nd

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

111

Ranking in other categories

Web Application Firewall (WAF) (8th), Container Security (1st), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)

Mindshare comparison

As of October 2025, in the Cloud Security Posture Management (CSPM) category, the mindshare of AWS Security Hub is 4.1%, down from 5.0% compared to the previous year. The mindshare of Prisma Cloud by Palo Alto Networks is 11.3%, down from 17.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
Prisma Cloud by Palo Alto Networks	11.3%
AWS Security Hub	4.1%
Other	84.6%

Cloud Security Posture Management (CSPM)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

Mohammad Qaw

Senior Security Consultant at helpag

It gives you one console to see all of your assets, review their configurations, and build your processes

Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture."

"Within AWS Security Hub, there is a feature for aggregating and prioritizing security findings which allows for better risk prioritization based on misconfiguration, as they know AWS thoroughly."

"The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings."

"AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS."

"The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."

"The solution shows us our compliance score."

"I rate Security Hub ten out of ten for stability."

"AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs."

More AWS Security Hub pros

"The solution offers very good configuration capabilities."

"The CWP module, runtime protection, and WAAS API are valuable."

"Prisma Cloud helped us with compliance. Most of my deployments have been greenfield, so I don't have a benchmark to compare how the security posture has improved. I've always used this from day zero of the configuration. However, I can say that the compliance checks for PCI, DSS, HIPAA, etc., made my life simpler. I don't need to look at each of these standards and compare the rules I have in place."

"I would say Twistlock is a fairly sophisticated tool."

"The CSPM and CWPP functionalities are pretty good."

"The visibility on alerts helps you investigate more easily and see details faster."

"It scans our containers in real time. Also, as they're built, it's looking into the container repository where the images are built, telling us ahead of time, "You have vulnerabilities here, and you should update this code before you deploy." And once it's deployed, it's scanning for vulnerabilities that are in production as the container is running."

"Technical support is quite helpful."

More Prisma Cloud by Palo Alto Networks pros

Cons

"It's not user-friendly. Too much going on, too many unnecessary findings, not very visual. You can't do much compared to other similar tools that are cheaper and better."

"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."

"There is room for improvement in implementing AI capabilities. It would be beneficial for Security Hub to implement preventative measures and to directly apply recommendations instead of just suggesting them."

"I would like a more fine-grained capability for creating custom rules and a more user-friendly experience programmatically in writing queries and configuring custom security rules, making it quicker and easier."

"There is room for improvement in implementing AI capabilities."

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"AWS Security Hub's configuration and integration are areas where it lacks and needs to improve."

"The solution lacks self-sufficiency."

More AWS Security Hub cons

"Sometimes, on the Azure side, there are issues. Some errors aren't being found on Prisma Cloud."

"They should improve the user experience."

"The Application Security dashboard was not as user-friendly as the Cloud Security dashboard."

"When an account is onboarded, if it is missing any permission, it should automatically be updated with the required permissions and policies."

"I don't have any specific notes for improvement; however, if they could continue to focus more on giving users the ability to create custom policies and configurations, that would be ideal."

"One of the main backlogs in their development is in the area of integration. For example, we have ServiceNow in place for ticket management and Prisma Cloud is supposed to send closure emails for incidents. But from time to time, it fails to do so. We have several other mismatches between Prisma Cloud and ServiceNow."

"We would like to have the detections be more contemporaneous. For example, we've seen detections of an overprivileged user or whatever it might be in any of the hundreds of Prisma policies, where there are 50 minutes of latency between the event and the alert."

"The UI could be improved."

More Prisma Cloud by Palo Alto Networks cons

Pricing and Cost Advice

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub's pricing is pretty reasonable."

"The price of AWS Security Hub is average compared to other solutions."

"The price of the solution is not very competitive but it is reasonable."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"Security Hub is not an expensive solution."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"The cost depends on the pricing model. Compared to other solutions, the cost isn't that bad."

"I wouldn't mind if it were cheaper. We are spending a fair amount of money on Prisma Cloud."

"One thing we're very pleased about is how the licensing model for Prisma is based on work resources. You buy a certain amount of work resources and then, as they enable new capabilities within Prisma, it just takes those work resource units and applies them to new features. This enables us to test and use the new features without having to go back and ask for and procure a whole new product, which could require going through weeks, and maybe months, of a procurement process."

"Prisma Cloud is a value-back cloud-managed solution; cloud-native solutions are quite expensive."

"The pricing and licensing are expensive compared to the other offerings that we considered."

"Prisma Cloud is a high-end enterprise solution, making it quite expensive."

"Our licensing fees are $18,000 USD per year."

"If a competitor came along and said, "We'll give you half the price," that doesn't necessarily mean that's the right answer, at all. We wouldn't necessarily entertain it that way. Does it do what we need it to do? Does it work with the things that we want it to work with? That is the important part for us. Pricing wasn't the big consideration it might be in some organizations. We spend millions on public cloud. In that context, it would not make sense to worry about the small price differences that you get between the products."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

872,029 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Computer Software Company

15%

Financial Services Firm

14%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	37
Midsize Enterprise	20
Large Enterprise	55

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

See all answers

What needs improvement with AWS Security Hub?

See all answers

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...

See all answers

Comparisons

Microsoft Sentinel vs AWS Security Hub

Compared 37% of the time

Wiz vs AWS Security Hub

Compared 11% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs AWS Security Hub

Compared 3% of the time

Google Cloud Security Command Center vs AWS Security Hub

Compared 3% of the time

More AWS Security Hub Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 14% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 10% of the time

Cyera vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

JFrog Xray vs Prisma Cloud by Palo Alto Networks

Compared 3% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Product Reports

Buyer's Guide

AWS Security Hub

October 2025

Download AWS Security Hub product report

Buyer's Guide

Prisma Cloud by Palo Alto Networks

October 2025

Prisma Cloud by Palo Alto Networks report

Download Prisma Cloud by Palo Alto Networks product report

Also Known As

SQRRL

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Buyer's Guide

AWS Security Hub vs. Prisma Cloud by Palo Alto Networks

September 2025

Free Report: AWS Security Hub vs. Prisma Cloud by Palo Alto Networks

Find out what your peers are saying about AWS Security Hub vs. Prisma Cloud by Palo Alto Networks and other solutions. Updated: September 2025.

DOWNLOAD NOW

872,029 professionals have used our research since 2012.

See our AWS Security Hub vs. Prisma Cloud by Palo Alto Networks report.

See our list of best Cloud Security Posture Management (CSPM) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.