Amazon Web Services (AWS) has released a new version of Security Hub to help corporate customers integrate third-party security solutions into the Amazon Web Services security environment and manage them there.

AWS overhauled Security Hub in late 2025. It built a mini security operations centre system that runs Inspector, a vulnerability scanning tool, and GuardDuty, a threat detection tool, on a single screen.

According to SecurityWeek, the new version goes further. It supports procuring, deploying and integrating full-stack enterprise security solutions across endpoint, identity management, email, network, data, browser, cloud, artificial intelligence and security operations on a single platform.

Partners currently available for integration include CrowdStrike, Okta, Splunk, Proofpoint and Zscaler, among 14 companies. Michael Fuller (마이클 풀러), head of AWS security services, said, "Over the past 4 months, I visited large customers and fast-growing customers in person and asked which solutions to prioritise for integration in the initial launch." He said, "We will continue to expand partners based on customer feedback."

The integration is based on OCSF (open cybersecurity schema framework). AWS explained that because partners' data flows in the OCSF format, correlation analysis is possible immediately without separate conversion work, and more granular threat detection can also be performed automatically.

The billing structure has also been simplified. AWS acts as the seller and provides partner solutions at pre-negotiated prices, and even if multiple solutions are used, they are consolidated into a single Amazon Web Services bill each month. Customers can choose either pay-as-you-go with no upfront payment or long-term contract, or a flat-rate plan.

Customers using existing third-party solutions can also connect data to Security Hub. In that case, customers must do the integration work themselves, and the single-bill benefit does not apply.