AWS Expands Security Hub to Integrate Curated Third-Party Security Tools
Summary
AWS announced Security Hub Extended, bringing curated third-party security vendors into Security Hub for cross-domain findings correlation. AWS says the plan also offers consolidated billing; existing integrations remain available through its standard program.
Key points
- Security Hub Extended adds curated third-party security vendors to AWS Security Hub, alongside AWS tools including Inspector and GuardDuty.
- AWS says partner findings use the Open Cybersecurity Schema Framework (OCSF), enabling pre-normalized data and automated cross-domain correlation.
- The launch partners include CrowdStrike, Okta, Proofpoint, Splunk, Zscaler and other vendors.
- AWS will act as seller of record for the curated offerings, with selected solutions combined on one AWS bill.
- Customers can continue using other existing third-party integrations through Security Hub’s standard program, but those do not qualify for the consolidated billing arrangement.
Article Details
- Event Type
- AWS product launch and platform expansion
- Impact
- Security Hub Extended brings selected third-party security vendors into AWS Security Hub for normalized, automated cross-domain correlation of security findings. AWS says the offering is intended to reduce integration and administrative work and provide a single AWS bill for selected curated partner solutions.
People
Vendors
7AIThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.Amazon Web ServicesAWS has launched a new version of its Security Hub that solves the massive workload involved in cross domain security solution correlation and management.BritiveThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.CrowdStrikeThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.CyeraThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.IslandThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.NomaThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.OktaThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.OligoThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.OptiThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.ProofpointThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.SailPointThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.SplunkThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.UpwindThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.ZscalerThe current vendors include 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler.
Products
Amazon GuardDutyIt unified several of its own security tools, including Inspector and GuardDuty, effectively into a mini-SOC.InspectorIt unified several of its own security tools, including Inspector and GuardDuty, effectively into a mini-SOC.Security HubAWS has launched a new version of its Security Hub that solves the massive workload involved in cross domain security solution correlation and management.Security Hub ExtendedNow, in early 2026, AWS announced Security Hub Extended.