Try our new research platform with insights from 80,000+ expert users
Shashank N - PeerSpot reviewer
Security Engineer-DevSecOps at a computer software company with 51-200 employees
Real User
Top 5Leaderboard
Easy to set up but not user-friendly and cluttered interface
Pros and Cons
  • "It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."
  • "It's not user-friendly. Too much going on, too many unnecessary findings, not very visual. You can't do much compared to other similar tools that are cheaper and better."

What is our primary use case?

It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale.

What is most valuable?

There are a lot of good rules, but the problem is it's very cluttered. Honestly, I wouldn't recommend it. It is too expensive for what it offers, too cluttered, and not user-friendly. It is not worth the money. There are much better options out there for the price.

What needs improvement?

It's not user-friendly. Too much going on, too many unnecessary findings, not very visual. You can't do much compared to other similar tools that are cheaper and better.

There's this company called PingSafe, just acquired by SentinelOne, that has a great cloud security offering. Prisma Cloud is also a better alternative.

For how long have I used the solution?

I have been using it for one and a half years. It is one of AWS's features. 

Buyer's Guide
AWS Security Hub
June 2025
Learn what your peers think about AWS Security Hub. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
860,168 professionals have used our research since 2012.

What do I think about the scalability of the solution?

Maybe five or six people are responsible for Security Hub specifically.

Which solution did I use previously and why did I switch?

At the time, we didn't have another option. Once we found better solutions, we migrated everything away from Security Hub.

How was the initial setup?

It's a one-click deployment; it's technically easy.

What other advice do I have?

If you are looking for an overall security posture management tool, I'd recommend something like PingSafe, Palo Alto, or something else entirely.

Overall, I would rate the solution a five out of ten. 

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
CobusFrey - PeerSpot reviewer
Product Owner Global Cloud at Tyme
Real User
Top 20
Not only does it easily integrate with third-party tools but also allows auto synchronization of logs
Pros and Cons
  • "Easily integrates with third-party tools"
  • "The solution should be easier to learn and use"

What is our primary use case?

The solution provides first-hand integration into tools like Amazon Inspector and Amazon Detective. The tool can also integrate with Cisco, Splunk and Microsoft AD and allows an organization to have a stronger posture and clarity against account creation, VPCs, and instance development. An organization can also automatically synchronize all logs within the security data lake using AWS Security Hub. Our company works across multiple continents like Asia and Africa with the product. 

What is most valuable?

People have a perception that synchronizing logs is quite expensive, but it's not if you understand AWS Security Hub and you don't have multiple streams of your cloud trail and guard duty and similar things. You don't need to pay for the transfer of data in your logs, which gives you absolute analytics and this is one of the most vital features of the solution. The AWS Security Hub also allows to have just one dashboard to manage security.  

What needs improvement?

The solution should be easier to learn and use, and data exportation should be more user-friendly. If a user doesn't know how to export data or how to link at the back-end of tools like Amazon Athena, using AWS Security Hub can be difficult. 

For how long have I used the solution?

I have been using the AWS Security Hub since the first version. 

Which other solutions did I evaluate?

Our company evaluates multiple products consistently, yet as part of our company, we prefer to use AWS Security Hub wherever possible. 

What other advice do I have?

AWS Security Hub has advanced quite a bit over the last couple of years. The features are quite rich now. Before purchasing, one should develop an understanding of the product. I believe AWS Security Hub is one of the most friendly solutions for integration with third-party tools. I find the integration of AWS Security Hub to be the easiest with tools from Microsoft and a bit difficult with Google solutions. 

AWS Security Hub is compliant in many different ways. The development business I am part of is SOC compliant for AWS Security Hub, while the banks our organization works with have been PCI compliant for AWS Security Hub for three years. 

I would definitely recommend AWS Security Hub to others, yet I would also inquire about their purpose and knowledge of cloud solutions. If you know how to use AWS Security Hub, it can be a great solution to work with. The solution is more suitable for people working in the cloud instead of on-premises. I would rate AWS Security Hub a nine out of ten. 

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
AWS Security Hub
June 2025
Learn what your peers think about AWS Security Hub. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
860,168 professionals have used our research since 2012.
Ankit Kumar - PeerSpot reviewer
Cloud Security Lead at CoinSwitch
Real User
Top 10
A cloud security posture management solution that can get your cloud's current security posture
Pros and Cons
  • "The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture."
  • "Although AWS Security Hub does a periodic scan of your overall infrastructure, it doesn't do it in real time."

What is our primary use case?

AWS Security Hub is a CSPM (cloud security posture management) solution where you can get your current configuration posture or the security posture of your cloud. You can scan it through multiple compliance checks like CIS Benchmark, AWS Security Best Practices, or PCI DSS.

What is most valuable?

The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture. We are currently using CIS benchmark and AWS Security Best Practices. So you'll get the score and all the findings.

What needs improvement?

Although AWS Security Hub does a periodic scan of your overall infrastructure, it doesn't do it in real time.

Real-time scanning should be included in the solution’s next release.

For how long have I used the solution?

I have been using AWS Security Hub for around four years.

What do I think about the stability of the solution?

AWS Security Hub is a stable solution.

What do I think about the scalability of the solution?

AWS Security Hub is a scalable solution. You can add multiple accounts to one place and monitor it from there. Around 20 people from the cloud security and DevOps teams are using the solution in our organization. We are not planning to increase the solution's usage in the future.

How are customer service and support?

AWS Security Hub's technical support is excellent because we always get a quick response from them. I rate AWS Security Hub's technical support an eight or nine out of ten.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Before AWS Security Hub, we used third-party tools like CloudGuard from Check Point. We decided to switch to AWS Security Hub because third-party tools provide the same capability as AWS Security Hub, and they are quite expensive.

How was the initial setup?

AWS Security Hub is easy to implement and can be done in just a few clicks.

What's my experience with pricing, setup cost, and licensing?

AWS Security Hub's pricing is pretty reasonable.

What other advice do I have?

AWS Security Hub has an updated version from AWS. So there is no version control from the customer side. It's a managed service provided by AWS.

It's easy to integrate AWS Security Hub with products by other vendors.

AWS Security Hub is the best service I could find in AWS native security service, and anyone can leverage it to get an overall view of their infrastructure posture. You can find out what is the current score of their infrastructure according to security.

Multiple findings or multiple loopholes can be fixed directly from the solution. AWS Security Hub will help improve any new organization or a new AWS account to get to an optimal security posture.

Overall, I rate AWS Security Hub a nine out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Manager - Cyber Security and SOC at Continental Tire
Real User
Top 20
Has efficient vulnerability detection features and an easy initial setup process
Pros and Cons
  • "The platform has valuable features for security."
  • "It is not flexible for multi-cloud environments."

What is our primary use case?

We use AWS Security Hub for vulnerability or compliance detection.

What is most valuable?

The platform has valuable features for security. It helps in identifying misconfigurations and vulnerabilities and fixing them early.

What needs improvement?

It's a dependent platform. It is not flexible for multi-cloud environments. They should add features for cloud diagnosis to analyze logs from the cloud in a standardized format. Additionally, its integration capabilities with external systems could be improved.

For how long have I used the solution?

I have been working with AWS Security Hub for two years.

How are customer service and support?

The AWS technical support is excellent. They have multiple channels of support.

How would you rate customer service and support?

Positive

How was the initial setup?

The setup is straightforward. The time taken for deployment depends on how many AWS services you are using and the complexity of your environment. But in general, it only takes a few hours. The process involves collecting logs and storing them in CloudVoice.

What's my experience with pricing, setup cost, and licensing?

There are multiple subscription models, like yearly, monthly, and packaged.

What other advice do I have?

I recommend AWS Security Hub to those who build their infrastructure only in the AWS cloud. If you don't want to spend much on adopting a new tool, I will strongly recommend the product.

I rate AWS Security an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
PeerSpot user
SumeshKumar - PeerSpot reviewer
Manager Cloud Security at Hitachi Systems, Ltd.
Real User
Top 5
An easy-to-manage tool that needs to make more compliances available for its users
Pros and Cons
  • "The most valuable feature of the solution stems from the fact that it is easy to manage...It is a scalable solution."
  • "From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool."

What is our primary use case?

The use case of AWS Security Hub is to manage the compliance part. It is a CSPM tool that helps you understand the compliance level of your infrastructure in the cloud. The tool gives you a score considering the levels of compliance you follow.

What is most valuable?

The most valuable feature of the solution stems from the fact that it is easy to manage, and a user of AWS does not have to log in to different consoles. If you have an AWS infrastructure, then it works fine. If you have multiple cloud infrastructures in your organization that may consist of cloud services from AWS, Azure, or GCP, then the tool may not be that effective since it can be described as a native tool for AWS.

What needs improvement?

From an improvement perspective, there is a need to add more compliance since, right now, AWS Security Hub only provides four to five compliances to control the tool. It should be made possible to integrate some of the other tools with AWS Security Hub so that it can give you complete visibility of the product.

AWS Security Hub needs a lot of improvement since it is a native tool meant for AWS products only. For providing compliance, a number of tools are available in the market to take care of the protection part.

In the future, AWS needs to implement a single dashboard and make different kinds of modules available. To use it as a CSPM tool, you must go with AWS Security Hub, Amazon Inspector, and AWS Config. AWS Security Hub needs to introduce a single dashboard that allows a security person to go and log in, see the status, and take action if necessary.

For how long have I used the solution?

I have been using AWS Security Hub for three to four years. I work as an integrator, and my company has partnerships with many companies involved in OEM tools.

What do I think about the stability of the solution?

Stability-wise, I rate the solution a seven out of ten.

What do I think about the scalability of the solution?

It is a scalable solution.

I have implemented AWS Security Hub for five to six customers of our company.

How are customer service and support?

AWS office has two types of support, namely business and standard. If you have opted for standard support, then it will be very complex to connect with the technical staff of AWS. If you have opted for business support, then the technical staff of AWS will connect with you within a minute. Business support is paid support.

How was the initial setup?

The initial setup of AWS Security Hub was straightforward.

The product's deployment process is very easy and can be completed within an hour. As soon as you enable the product, it works. The product doesn't require the user to undergo any other implementation phases since it is a tool that you just have to enable in your environment to make it work across your environment.

The product's deployment process is very easy since you just need to log in to the control before going to Security Hub to enable it. You may enable AWS Security Hub in which account you want to enable.

The solution is deployed on the cloud.

One or two staff members are enough to manage the solution's deployment and maintenance. If you have a bigger environment with thousands of machines, then one or two people are enough to take care of the visibility part of the solution, but the maintenance will require a large number of staff members.

What's my experience with pricing, setup cost, and licensing?

AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use.

What other advice do I have?

If a person only wants a CSPM tool, then they can go with AWS Security Hub. If a person wants the product to be more than just a CSPM tool, then they need to evaluate the solutions available in the market.

I rate the overall tool a seven out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
PeerSpot user
CVO at Megaaisec
Real User
Top 20
Helps to host SaaS and PaaS applications
Pros and Cons
  • "Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."
  • "One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."

What is our primary use case?

Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup.

What needs improvement?

One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function.


For how long have I used the solution?

I have been using the solution for the past ten years.

What do I think about the stability of the solution?

The stability is good. The solution is considered one of the most stable and reliable cloud platforms globally among the three major cloud service providers.

What do I think about the scalability of the solution?

The scalability is good. It’s better than any other tool available. We have 1000 users for the solution.

How are customer service and support?

In our organization, we rely on third-party support for our cloud operations. We have a local operations team that works with various suppliers to handle our cloud-related support and maintenance needs.

How was the initial setup?

The initial setup was complex. We need 100 technical staff for deployment.

What other advice do I have?

I would definitely recommend this solution to others who are considering using it. While there might be room for improvement in the future to align with evolving technology trends, it has been a good option for us and meets our current business and technological needs. Overall, I rate the solution an eight out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Yusuf-Hashmi - PeerSpot reviewer
Sr. Director - Group Head - IT Security (CISO) at Jubilant Organosys Ltd., India, Leading Chemical M
Real User
It's good for CIS compliance, but you can run into challenges working with multiple instances
Pros and Cons
  • "AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS."
  • "The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."

What is our primary use case?

We use Security Hub to collect telemetry information about misconfigurations in the cloud environment. It helps us identify any misconfigurations in the AWS Cloud stack. 

What is most valuable?

AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS.

What needs improvement?

The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results. 

For how long have I used the solution?

I have used AWS Security Hub for about four months.

What do I think about the stability of the solution?

Security Hub is native to AWS, so it's stable. 

What do I think about the scalability of the solution?

AWS Security Hub is pretty scalable. 

How was the initial setup?

Security Hub is enabled on AWS by default. You don't need to deploy anything, but you have to configure your policies.

Which other solutions did I evaluate?

We are evaluating several other CSPM solutions, including Tenable. 

What other advice do I have?

I rate AWS Security Hub seven out of 10. I recommend Security Hub if all of your workloads are on AWS and you don't have deployments on any other cloud platforms. It's the best option when you don't want to spend money.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Ekule Mbeng - PeerSpot reviewer
DevOps Engineer at United Vision
Real User
Beneficial monitoring tracking and scalable
Pros and Cons
  • "The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources."
  • "AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."

What is our primary use case?

AWS Security Hub is used to run automated security checks across Amazon AWS environments.

How has it helped my organization?

The solution has helped my company because I can track IMT.

What is most valuable?

The most valuable feature of AWS Security Hub is the ability to track when monitoring is not enabled on any of my resources.

What needs improvement?

AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time.

For how long have I used the solution?

I have been using AWS Security Hub for approximately two years.

What do I think about the stability of the solution?

AWS Security Hub is stable. The solution is built on top of our Amazon services which makes it reliable.

What do I think about the scalability of the solution?

The solution is highly scalable.

I rate the scalability of AWS Security Hub a seven out of ten.

How was the initial setup?

I rate the initial setup of AWS Security Hub a seven out of ten.

What was our ROI?

I have received a return on investment using AWS Security Hub.

What's my experience with pricing, setup cost, and licensing?

The price of AWS Security Hub is average compared to other solutions.

What other advice do I have?

Security is paramount when it comes to the cloud. For any company that wants to migrate to the cloud or is in the cloud already, we need to take our security into consideration. I would advise everyone this solution provides one dashboard for all the security events happening in the environment.

I rate AWS Security Hub an eight out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Download our free AWS Security Hub Report and get advice and tips from experienced pros sharing their opinions.
Updated: June 2025
Buyer's Guide
Download our free AWS Security Hub Report and get advice and tips from experienced pros sharing their opinions.