AWS Security Hub vs Sumo Logic Security comparison

Amazon Web Services (AWS) and Sumo Logic are both solutions in the Security Information and Event Management (SIEM) category. Amazon Web Services (AWS) is ranked #7 with an average rating of 7.6, while Sumo Logic is ranked #19 with an average rating of 8.3. Amazon Web Services (AWS) holds a 4.5% mindshare in SIEM, compared to Sumo Logic’s 0.8% mindshare. Additionally, 90% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 95% of Sumo Logic users who would recommend it.

AWS Security Hub

Read 19 AWS Security Hub reviews

6,278 Views
5,219 Comparison Views

90% willing to recommend

Sumo Logic Security

Read 18 Sumo Logic Security reviews

1,626 Views
1,104 Comparison Views

95% willing to recommend

AWS Security Hub

Sumo Logic Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Sumo Logic Security and AWS Security Hub are two prominent security solutions. Sumo Logic Security has an edge with its robust analytics, while AWS Security Hub is favored for its comprehensive integration with AWS services.

Features: Sumo Logic Security is known for powerful analytics, real-time monitoring, and flexible data ingestion. AWS Security Hub is notable for seamless AWS integration, advanced threat detection, and automated compliance checks.

Room for Improvement: Sumo Logic Security could improve its alerting system, enhance data visualization tools, and offer more customizable dashboards. AWS Security Hub needs better user documentation, an improved notification system, and more granular access controls.

Ease of Deployment and Customer Service: Sumo Logic Security is known for straightforward deployment and responsive customer support. AWS Security Hub offers simple deployment within AWS environments, though customer service experiences vary.

Pricing and ROI: Sumo Logic Security offers competitive pricing and perceived good ROI with a flexible cost structure. AWS Security Hub is potentially more expensive but is valued for extensive features and integration justifying its cost.

To learn more, read our detailed AWS Security Hub vs. Sumo Logic Security Report (Updated: October 2024).

Buyer's Guide

AWS Security Hub vs. Sumo Logic Security

October 2024

Download the complete report

Helped 814,649 peers since 2012

Categories and Ranking

AWS Security Hub

Ranking in Security Information and Event Management (SIEM)

7th

Ranking in Security Orchestration Automation and Response (SOAR)

5th

Average Rating

7.6

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Cloud Security Posture Management (CSPM) (14th)

Sumo Logic Security

Ranking in Security Information and Event Management (SIEM)

19th

Ranking in Security Orchestration Automation and Response (SOAR)

12th

Average Rating

8.6

Number of Reviews

Ranking in other categories

Log Management (19th)

Mindshare comparison

As of November 2024, in the Security Information and Event Management (SIEM) category, the mindshare of AWS Security Hub is 4.5%, down from 4.6% compared to the previous year. The mindshare of Sumo Logic Security is 0.8%, down from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

CobusFrey

Product Owner Global Cloud at Tyme

Apr 8, 2024

Not only does it easily integrate with third-party tools but also allows auto synchronization of logs

AWS Security Hub has advanced quite a bit over the last couple of years. The features are quite rich now. Before purchasing, one should develop an understanding of the product. I believe AWS Security Hub is one of the most friendly solutions for integration with third-party tools. I find the integration of AWS Security Hub to be the easiest with tools from Microsoft and a bit difficult with Google solutions. AWS Security Hub is compliant in many different ways. The development business I am part of is SOC compliant for AWS Security Hub, while the banks our organization works with have been PCI compliant for AWS Security Hub for three years. I would definitely recommend AWS Security Hub to others, yet I would also inquire about their purpose and knowledge of cloud solutions. If you know how to use AWS Security Hub, it can be a great solution to work with. The solution is more suitable for people working in the cloud instead of on-premises. I would rate AWS Security Hub a nine out of ten.

Read full review

Moole Muralidhara Reddy

DevOps and Solution Architect at ADP

Mar 26, 2024

Used to store and monitor application logs and VPC flow logs

We are mainly concentrating on networking. We use VPC products and application logs to monitor the genuineness of users who have logged in. We also store and monitor GuardDuty logs to see if someone is trying to access the same server multiple times. We are storing and monitoring WAF logs and GuardDuty logs. If someone faces any issues, we'll receive an email and take action based on it. If someone tries to access one of the applications from a different country, we can search in Google and identify the location of that particular IP address. Sumo Logic Security identifies whether a particular IP address is low, medium, or high risk without the help of Google. We can store logs in CloudWatch, but it is very difficult to search them in CloudWatch. We should know the query in order to do that. Searching for logs with Sumo Logic Security is very easy compared to CloudWatch. We have been using the solution for more than two years and haven't faced any issues with the solution's availability. I would recommend the solution to other users. I would recommend Sumo Logic Security instead of AWS, CloudWatch, or CloudTrail. With Sumo Logic Security, you can capture and see all the logs in a single place. If some issues occur, you can log into the solution and verify all the logs. At an organizational level, we have multiple AWS accounts for different environments. Instead of logging in to all the AWS accounts, you can log in to Sumo Logic Security and verify everything. Overall, I rate the solution a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."

"It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."

"AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS."

"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."

"The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."

"The solution shows us our compliance score."

"I find all of the features to be highly valuable."

More AWS Security Hub pros

"Technical support is always great."

"With this tool, we provide access to every developer team the ability to find errors, then they come to us and ask for specific help."

"It provides easy visibility. I also like the shareable queries because we share a lot across groups."

"Scalability has been good for our needs. We haven't run into any scaling issues in regards to size so far."

"The tool has key features like operability. It will alert the admins whenever a device is onboarded."

"The solution is quite stable."

"The most valuable features of Sumo Logic Security are the rules, use cases, and ease of use. Additionally, the integration is straightforward and good GUI."

"It helps a lot because we can troubleshoot issues pretty easily."

More Sumo Logic Security pros

Cons

"Although AWS Security Hub does a periodic scan of your overall infrastructure, it doesn't do it in real time."

"The support must be quicker."

"Security needs to be measured based on their own criteria. We can't add custom criteria specific to our organization. For example, having an S3 bucket publicly available might be flagged as a critical alert, but it might not be critical in a sandbox environment. So, it gets flagged as critical, which becomes a false positive. So, customization options and creating custom dashboards would be areas for improvement."

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"Many findings are too generic or irrelevant to the environment, which can lead to false positives."

"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

More AWS Security Hub cons

"It took a bit of trial and error to get it set up correctly based on everything we had to do. In the end, we had to send everything over HTTP, which was sort of a stop-gap."

"The API integration in Sumo Logic Security could improve. There are delayed connections or they stop and then automatically start. Having a seamless log collection would be beneficial."

"Sumo Logic needs to make sure integrating solutions are seamless."

"We would like the ability to drill down into a dashboard and get into deeper levels."

"The integration with multiple sources could be better."

"The solution should improve its UI."

"We would like to have some type of predefined setup for the logs, making the setup easier by default."

"The dashboard has room for improvement, because sometimes it is a difficult to create a specific dashboard or query. This would be a nice place to correct problems."

More Sumo Logic Security cons

Pricing and Cost Advice

"AWS Security Hub's pricing is pretty reasonable."

"There are multiple subscription models, like yearly, monthly, and packaged."

"The price of AWS Security Hub is average compared to other solutions."

"The price of the solution is not very competitive but it is reasonable."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The pricing is fine. It is not an expensive tool."

"Security Hub is not an expensive solution."

"The AWS Marketplace pricing is borderline. Every annual renewal, we always contemplate if we are getting what we think we could out of it or could we do it cheaper with some other product."

"The only limit to the scalability of the product for us is how much we are willing to pay."

"The pricing is good. It's not an issue for us."

"Pricing has been cheaper than some of the competing tools, like Splunk."

"We chose to go through the AWS Marketplace because it makes it a lot easier when we bill our customers. Rather than having to get multiple different sources of information then correlate a monthly bill for our customers, it is just included in the AWS usage charges."

"The price scaling comes in a bit expensive."

"Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products."

"Purchasing Sumo Logic through the AWS Marketplace was a simple step."

More Sumo Logic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

814,649 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

Government

Computer Software Company

16%

Financial Services Firm

11%

Government

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

See all answers

What needs improvement with AWS Security Hub?

Many findings are too generic or irrelevant to the environment, which can lead to false positives. It can be challenging to suppress or turn off these findings. Turning specific findings on or off ...

See all answers

What do you like most about Sumo Logic Security?

Sumo Logic Security is a good solution for searching the logs and identifying the issues.

See all answers

What is your experience regarding pricing and costs for Sumo Logic Security?

Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products.

See all answers

What needs improvement with Sumo Logic Security?

Sumo Logic Security is expensive, and its pricing could be improved.

See all answers

Comparisons

Microsoft Sentinel vs AWS Security Hub

Compared 38% of the time

Wiz vs AWS Security Hub

Compared 12% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 11% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 6% of the time

Google Chronicle Suite vs AWS Security Hub

Compared 6% of the time

More AWS Security Hub Competitors

Google Chronicle Suite vs Sumo Logic Security

Compared 15% of the time

Wazuh vs Sumo Logic Security

Compared 13% of the time

Rapid7 InsightIDR vs Sumo Logic Security

Compared 11% of the time

Securonix Next-Gen SIEM vs Sumo Logic Security

Compared 8% of the time

Microsoft Sentinel vs Sumo Logic Security

Compared 8% of the time

More Sumo Logic Security Competitors

Product Reports

Buyer's Guide

AWS Security Hub

November 2024

Download AWS Security Hub product report

Buyer's Guide

Sumo Logic Security

October 2024

Download Sumo Logic Security product report

Also Known As

SQRRL

No data available

Learn More

Amazon Web Services (AWS)

Sumo Logic

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.
Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.
Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.
Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Information Not Available

Buyer's Guide

AWS Security Hub vs. Sumo Logic Security

October 2024

Free Report: AWS Security Hub vs. Sumo Logic Security

Find out what your peers are saying about AWS Security Hub vs. Sumo Logic Security and other solutions. Updated: October 2024.

DOWNLOAD NOW

814,649 professionals have used our research since 2012.

See our AWS Security Hub vs. Sumo Logic Security report.

See our list of best Security Information and Event Management (SIEM) vendors, best Security Orchestration Automation and Response (SOAR) vendors, and best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.