AWS Security Hub CSPM Pricing in 2026
Every plan AWS Security Hub CSPM publishes, with the page and date we read it from. Prices we could not find on AWS Security Hub CSPM's own site are marked "Not published", never guessed.
| Plan | Price | Billing | Limits | Source |
|---|---|---|---|---|
| Security Hub Essentials | Not published | Pay-as-you-go; resource unit / mo; prorated by monitored time | Per-resource charges apply to EC2 instances, ECR container images, Lambda functions, and IAM users/roles; other monitored resources are included; AWS and Azure coverage | aws.amazon.com |
| Security Hub Extended Plan | Not published | Pay-as-you-go per partner; no upfront commitments | Essentials must be enabled first; charges are additional to Essentials; 23 curated partner solutions across 10 security categories | aws.amazon.com |
| Threat Analytics + Lambda Code Scanning add-ons | Not published | Tiered by volume; in addition to Essentials | Threat Analytics covers CloudTrail management events, S3 data events, VPC Flow Logs, DNS query logs, and EKS audit logs; Lambda code scanning scans on deployment and periodically | aws.amazon.com |
About AWS Security Hub CSPMAWS Security Hub CSPM alternatives