No. 24 of 35 ·Cloud Security Posture Management Software

AWS Security Hub CSPM

Web · API

Freedom report

One barScore 5.0

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

AWS Security Hub CSPM is ranked #24 of 35 in cloud security posture management software on Freedom251. It runs on API, Web. There is no free plan. A free trial is offered.

AWS Security Hub CSPM plans and pricing

All plans

Security Hub Essentials Not published Pay-as-you-go; resource unit / mo; prorated by monitored time Per-resource charges apply to EC2 instances, ECR container images, Lambda functions, and IAM users/roles; other monitored resources are included; AWS and Azure coverage aws.amazon.com · 4 Oct 2026

Security Hub Extended Plan Not published Pay-as-you-go per partner; no upfront commitments Essentials must be enabled first; charges are additional to Essentials; 23 curated partner solutions across 10 security categories aws.amazon.com · 4 Oct 2026

Threat Analytics + Lambda Code Scanning add-ons Not published Tiered by volume; in addition to Essentials Threat Analytics covers CloudTrail management events, S3 data events, VPC Flow Logs, DNS query logs, and EKS audit logs; Lambda code scanning scans on deployment and periodically aws.amazon.com · 4 Oct 2026

Compared on cloud security posture management software

Free plan: No
Compliance frameworks: 800

Best AWS Security Hub CSPM alternatives

See all 12

Two bars Aikido CSPM Free tier No. 1$300/mo6.6 Two bars Mondoo CSPM Free tier No. 2Free6.6 One bar Prowler Cloud Free tier No. 3$99/mo6.5 One bar Oracle Cloud Infrastructure Secret Management Free tier No. 4Free6.3 One bar Qualys TotalCloud Free tier No. 5Free6.3 One bar Bitdefender Total Security Paid plans No. 6$5/mo5.7

The record

Purpose: AWS Security Hub CSPM checks AWS resources against security best practices and combines findings from AWS security services and partner tools to identify misconfigurations and assess security posture.
Frameworks: Its standards align with AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST.
Response automation: Security Hub provides automated response workflows to streamline remediation at scale.
Risk prioritization: Security Hub correlates and enriches findings to prioritize critical issues across accounts and AWS Regions, with customizable dashboard widgets and near-real-time risk analytics.
Multicloud: Security Hub can extend visibility to Microsoft Azure resources, including virtual machines, container images, Function Apps, and identities.
Attack path analysis: Security Hub visualizes potential attack paths by mapping how vulnerabilities and misconfigurations could connect to critical resources.
Included capabilities: The Essentials plan includes findings ingestion and aggregation, Automation Rules, CSPM, several Inspector scanning capabilities, CIS Benchmark Assessments, and a service-linked AWS Config recorder.
Pricing scope: Per-resource pricing applies to EC2 instances, ECR container images, Lambda functions, and IAM users and roles; other monitored resources are included.
Billing limit: Other AWS security service capabilities not included in Security Hub plans, including remaining GuardDuty and Inspector capabilities, retain their original service billing.
Partner integrations: The Extended Plan offers curated partner solutions across endpoint, identity, email, network, data, browser, cloud, AI, security operations, and supply chain categories.
Support and procurement: AWS describes Security Hub as offering one consolidated bill, consolidated support, and flexible pricing across AWS and partner solutions.
Compliance support: AWS says it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.
Shared responsibility: AWS states security and compliance are shared responsibilities, with customers responsible for guest operating systems, application software, and configuration of AWS security group firewalls.
Intended customers: AWS says its customers range from startups and enterprises to nonprofits and governments.

Where it ranks on Freedom251

Best Cloud Security Posture Management Software in 2026#24 of 35
Best Cloud Security Platforms in 2026#21 of 28
Best Security Configuration Management Software in 2026#21 of 26

Is AWS Security Hub CSPM yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote AWS Security Hub CSPM

Sources

aws.amazon.com/security-hub/cspm/· checked 4 Oct 2026
aws.amazon.com/security-hub/features/· checked 4 Oct 2026
aws.amazon.com/security-hub/pricing/· checked 4 Oct 2026
aws.amazon.com/compliance/· checked 4 Oct 2026
aws.amazon.com/about-aws/· checked 4 Oct 2026