AWS Security Hub Extended: Unifying Enterprise Security with Curated Partner Solutions

AWS has launched Security Hub Extended, a new plan that transforms how enterprises procure and manage comprehensive security solutions across their entire technology stack. This announcement builds upon the re:Invent 2025 introduction of a unified Security Hub experience that combines AWS security services like GuardDuty and Inspector into a single, cohesive platform.

Simplifying Enterprise Security Procurement

The core challenge Security Hub Extended addresses is the complexity enterprises face when managing multiple security vendors and procurement cycles. Organizations often struggle with negotiating individual contracts, managing different billing systems, and integrating disparate security solutions. AWS Security Hub Extended eliminates these pain points by offering a curated selection of partner solutions through a single subscription model.

With AWS as the seller of record, customers benefit from pre-negotiated pay-as-you-go pricing, consolidated billing, and no long-term commitments. This approach significantly reduces the administrative overhead typically associated with enterprise security procurement.

Curated Partner Ecosystem

The Extended plan includes integrations with leading security providers across critical domains:

• Endpoint Security: CrowdStrike
• Identity Management: Britive, Okta, SailPoint
• Email Security: Proofpoint
• Data Security: Cyera
• Network Security: Zscaler, Upwind
• Browser Security: Island
• Cloud Security: 7AI, Oligo, Opti
• AI Security: Noma
• Security Operations: Splunk (Cisco company)

This comprehensive coverage ensures organizations can protect their entire technology stack without managing multiple vendor relationships.

Unified Security Operations Experience

Beyond simplified procurement, Security Hub Extended provides a unified security operations experience. All security findings from AWS and partner solutions are emitted in the Open Cybersecurity Schema Framework (OCSF) schema and automatically aggregated within Security Hub. This standardization enables organizations to quickly identify and respond to risks that span across different security domains.

Implementation and Access

Organizations can access partner solutions directly within the Security Hub console under the Extended plan section in the Management menu. The process is straightforward:

1. Review and select desired partner offerings
2. Subscribe to chosen solutions
3. Complete automated onboarding with each partner
4. Begin consumption-based metering with monthly billing

Security findings from all integrated solutions are immediately available in normalized OCSF format, providing instant visibility across the entire security posture.

Availability and Pricing

Security Hub Extended is now generally available in all AWS commercial regions where Security Hub operates. The flexible pay-as-you-go and flat-rate pricing models eliminate upfront investments and long-term commitments, making enterprise-grade security more accessible to organizations of all sizes.

For detailed pricing information and implementation guidance, visit the AWS Security Hub pricing page and the AWS Security Hub User Guide.

This expansion represents AWS's continued commitment to simplifying enterprise security while maintaining comprehensive protection across the evolving threat landscape.