Overview

Recent Reviews

GuardDuty is a must have for AWS environments

10 out of 10

May 15, 2022

We have a multi-tenant AWS environment with dozens of AWS account all managed under control tower. We use GuardDuty on every AWS account …

Reviewer Pros & Cons

View all pros & cons

Monitors outgoing connections from AWS resources to known malicious hosts.
Does not have the ability to add any custom monitors.

AK

Alex Kranz

Senior System Administrator

Bridgeline Digital (Computer Software, 51-200 employees)

Video Reviews

Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of Amazon GuardDuty, and make your voice heard!

Record

Pricing

View all pricing

Amazon GuardDuty

N/A

Unavailable

What is Amazon GuardDuty?

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.

Entry-level set up fee?

No setup fee

Offerings

Free Trial
Free/Freemium Version
Premium Consulting / Integration Services

Would you like us to let the vendor know that you want pricing?

1 person want pricing too

Alternatives Pricing

CrowdStrike Falcon

$6.99

per endpoint/month (for 5-250 endpoints, billed annually)

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance…

AlienVault USM

$1,075

per month

What is AlienVault USM?

AlienVault® Unified Security Management® (USM) delivers threat detection, incident response, and compliance management in one unified platform. It is designed to combine all the essential security capabilities needed for effective security monitoring across cloud and on-premises environments,…

Features Scorecard

No scorecards have been submitted for this product yet..

Product Details

What is Amazon GuardDuty?

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.

Amazon GuardDuty Technical Details

Operating Systems	Unspecified
Mobile Application	No

Comparisons

View all alternatives

Compare with

Lacework

Score 8.8 out of 10

Compare

CrowdStrike Falcon

Score 9.1 out of 10

Compare

Palo Alto Networks Threat Protection

Score 8.2 out of 10

Compare

Snort

Score 8.9 out of 10

Compare

Alert Logic

Score 7.2 out of 10

Compare

Proofpoint Advanced Threat Protection

Score 8.6 out of 10

Compare

Cisco Secure IPS

Score 9.3 out of 10

Compare

SonicWall Capture Advanced Threat Protection (ATP)

Score 8.1 out of 10

Compare

Trend Micro TippingPoint Threat Protection System (TPS)

Score 7.0 out of 10

Compare

Cisco IPS Sensor (Discontinued)

Score 8.9 out of 10

Compare

McAfee Network Security Platform

Score 7.8 out of 10

Compare

Powertech Exit Point Manager for IBM i

Score 9.2 out of 10

Compare

Reviews and Ratings

(5)

Reviews

(1-1 of 1)

Sort by

Popular Filters

Companies can't remove reviews or game the system. Here's why

May 15, 2022

GuardDuty is a must have for AWS environments

AK

Alex Kranz

Senior System Administrator

Bridgeline Digital (Computer Software, 51-200 employees)

Score 10 out of 10

Vetted Review

Verified User

Review Source

Use Cases and Deployment Scope

We have a multi-tenant AWS environment with dozens of AWS account all managed under control tower. We use GuardDuty on every AWS account and it has been incredibly useful for monitoring the security of our AWS accounts.

Pros and Cons

Monitors outgoing connections from AWS resources to known malicious hosts.
Monitors incoming connection to AWS resources from known malicious hosts.
Integrates with other centralized logging solutions.

Does not have the ability to add any custom monitors.

Likelihood to Recommend

In a multi-account/multi-tenant environment, GuardDuty often alerts us to possible malicious traffic before it becomes an issue. The ability to automatically enable GuardDuty creates baseline security which is crucial when an account is first created. It also helps greatly in environments where other users are able to create resources as often GuardDuty alerts us to insecure resources we did not know about. It can however sometimes be a little overzealous with its assessments alerting on benign activity which then requires suppression rules.