AWS Security Hub vs CRITICALSTART comparison

Amazon Web Services (AWS) and Critical Start are both solutions in the Security Orchestration Automation and Response (SOAR) category. Amazon Web Services (AWS) is ranked #5 with an average rating of 7.6, while Critical Start is ranked #27. Amazon Web Services (AWS) holds a 8.1% mindshare in SOAR, compared to Critical Start’s 0.3% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 100% of Critical Start users who would recommend it.

AWS Security Hub

Read 26 AWS Security Hub reviews

7,414 Views
2,891 Comparison Views

89% willing to recommend

CRITICALSTART

Read 10 CRITICALSTART reviews

703 Views
120 Comparison Views

100% willing to recommend

AWS Security Hub

CRITICALSTART

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 5, 2024

AWS Security Hub and CRITICALSTART are competitors in the cybersecurity market. AWS Security Hub holds an edge in integration within the AWS ecosystem, while CRITICALSTART excels in advanced threat detection and response.

Features: AWS Security Hub integrates seamlessly with AWS services, offers a centralized security view, and maintains compliance checks. It acts as a one-stop dashboard for security alerts. CRITICALSTART provides real-time threat intelligence, managed detection and response services, and strong human intervention capabilities, utilizing a Zero-Trust model for security enhancements.

Room for Improvement:AWS Security Hub could improve its UI intuitiveness and support for hybrid environments and reduce complexity in dashboard usage. CRITICALSTART could enhance response times, lower the complexity of UI navigation, and refine feature tuning for better alert management.

Ease of Deployment and Customer Service: AWS Security Hub is easily deployed for AWS environments with comprehensive documentation and automation features, promoting self-reliance. CRITICALSTART offers a more hands-on deployment with personalized support, beneficial for organizations needing extensive setup assistance.

Pricing and ROI: AWS Security Hub offers cost-effective scalability, suiting organizations deeply embedded in AWS. CRITICALSTART, though potentially higher in initial costs, provides tailored security solutions and expert management that justify its pricing for businesses prioritizing security.

To learn more, read our detailed AWS Security Hub vs. CRITICALSTART Report (Updated: September 2025).

Buyer's Guide

AWS Security Hub vs. CRITICALSTART

September 2025

Download the complete report

Helped 869,566 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Security Hub

Ranking in Security Orchestration Automation and Response (SOAR)

5th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Cloud Security Posture Management (CSPM) (13th)

CRITICALSTART

Ranking in Security Orchestration Automation and Response (SOAR)

27th

Average Rating

9.4

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Managed Detection and Response (MDR) (31st)

Mindshare comparison

As of October 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of AWS Security Hub is 8.1%, down from 9.8% compared to the previous year. The mindshare of CRITICALSTART is 0.3%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Orchestration Automation and Response (SOAR) Market Share Distribution
Product	Market Share (%)
AWS Security Hub	8.1%
CRITICALSTART	0.3%
Other	91.6%

Security Orchestration Automation and Response (SOAR)

Featured Reviews

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

Justin Hadley

Sr. Manager, Security Engineering at a financial services firm with 501-1,000 employees

The transparency of data in the platform is perfect: You see everything as they are seeing it

Their Zero Trust Analytics Platform (ZTAP) engine, which is kind of their correlation engine, is by far and away one of the best in the business. We can filter and utilize different lists to build out different alerts, such as, what to alert on and when not to alert. This engine helps reduce our number of alerts and false positives. The service's Trusted Behavior Registry helps the provider solve every alert. The way that they have it built out is very intelligent. The way every alert comes in, it gets triaged one direction or another. If it is already a false positive, then it is still getting addressed and reviewed on a regular cadence. Also, true positive alerts get escalated to the appropriate personnel. Its mobile app is great. The ability just to be able to quick reference and see what's coming in when you're on the move or go. You don't always need to have your computer or laptop handy, because you can operate it just from the mobile app. It can communicate with analysts, which is great. The mobile app is great at affecting the efficiency of our security operations. Those guys are using it throughout the day, whether that be at the office, home, or off hours. Typically, they triage from the mobile app. Then, if an escalation needs to be done on a computer, they will pull out a computer. We were on the original UI for a few years, so the updated UI has been a refreshing change. It has significantly more ability to filter and translate data, then load that data. It is rather intuitive to click through for some of our junior analysts or interns, especially as we are starting to onboard and teach them different aspects of the security operations team.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best feature of AWS Security Hub is that you can get compliance or your cloud's current security posture."

"I really like the seamless integration with the AWS account structure. It can even be made mandatory as part of the landing zone. These are great features. And there's a single pane of glass for the entire account."

"Easily integrates with third-party tools"

"Cloudposse is a valuable feature as it guarantees my security."

"The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings."

"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."

"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."

"Very good at detection and providing real-time alerts."

More AWS Security Hub pros

"The way that the user interface presents data enables our team to be able to make decisions significantly quicker, rather than have to dig into the details or go back to the original tools."

"Customer service and their response are phenomenal. I would give their customer support a nine point five (out of 10). Our easy access to their SOC analyst, sales team, and leadership team instills confidence in me that they are there for us 24/7."

"The most valuable feature of their service is their tuning... If we were getting 1,000 alerts a day without them, they tune it until they know what to do for 999 of them, and one will make it through to us per day. That tuning is the most valuable part of their solution."

"Outside of using the platform to manage alerts, the feature of the service that we get the most value from is being able to reach out to them and say, "Hey, we might go buy a SIEM," for example. They give us their overview of what's out there, what they've dealt with, what they integrate with, and what that looks like. That's been pretty powerful over the years for us."

"Their Zero Trust Analytics Platform (ZTAP) engine, which is kind of their correlation engine, is by far and away one of the best in the business. We can filter and utilize different lists to build out different alerts, such as, what to alert on and when not to alert. This engine helps reduce our number of alerts and false positives."

"From where we were prior to going into them, the service has increased our analysts’ efficiency to the point that they can focus on other areas of the business. It gives me the ability to allow analysts to do Level 3 and 4 work and stay out of the weeds of the alerts, where you tend to get alert fatigue. The service takes care of much of the Tier 1 and Tier 2 triage. It is more effective than what we had been used to, because it allows the filtering of Level 1 and Level 2 type alerts to be taken care of. This leaves less for us to handle, which is a good thing."

"The quick interaction between the agents is the most valuable feature. If we have questions, they're quick to answer. If we make a change to our system, they quickly make the changes that are necessary to filter the logs correctly."

"There are two parts of CRITICALSTART's services that are most valuable to us. The MDR solution where they monitor our computers, laptops, and users across the board; and their knowledge of Palo Alto firewalls."

More CRITICALSTART pros

Cons

"The user interface, graphs, and dashboards of the solution could improve in the future. They are not very sophisticated and could use an update."

"The solution should be easier to learn and use"

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"AWS Security Hub's configuration and integration are areas where it lacks and needs to improve."

"AWS Security Hub should improve the time it takes to update. It takes a long period of time when updating. It can take 24 hours sometimes to update. Additionally, when integrating this solution with more security tools, takes time."

"Although AWS Security Hub does a periodic scan of your overall infrastructure, it doesn't do it in real time."

"Security Hub is currently not worth investing in, as it requires more configurations and integration with other services to work effectively."

"Shortening the response time for support tickets, particularly in production issues, could make the service more efficient."

More AWS Security Hub cons

"There is room for improvement with the new UI, and that's about it. I would like to see a more intuitive design."

"They could dig a little bit deeper into the Splunk alerts when they feel like they need to be escalated to us. For example, if a locked account shows up, they could do a little extra digging to verify that the locked account was due to a bad password on the local system. They could just do a little extra digging within the Splunk environment instead of pushing it onto us to go do that extra little digging."

"It has frustrated us that they don't have a native Slack integration, because most things do now. That's something we've asked for, for years, and it just doesn't really seem like it's a priority."

"The biggest room for improvement is not necessarily in their service or offering, but in the products that they support. I would like them to further their knowledge and ability to integrate with those tools. They have base integrations with everything, and we haven't come across anything. They should just continue to build on that API interface between their applications and other third-party consoles."

"They just did a user interface overhaul to the website portal that you use for troubleshooting tickets. The old one was fine. The new one is not intuitive..."

"During the six-month integration and rollout, there were some bumpy roads along the way. There were communication breakdowns between the project manager, CRITICALSTART leadership, and us (as the customer). I expressed my displeasure during the integration in their inability to effectively communicate when there were holdups or issues. They were going through some growing pains at that time, but they have been right there for us ever since."

"The only thing I can think of that I would like to see, and I'm sure they could work this into a service pretty easily, is not only alerts on issues that are affecting my company, but some threat intelligence of a general nature on what's out there in the environment. That might be a nice add-in."

"The updated UI is actually pretty bad. Regarding the intuitiveness, it is fairly easy to use, but the responsiveness, on a scale of one to 10, is a one. It's really poor performance."

More CRITICALSTART cons

Pricing and Cost Advice

"There are multiple subscription models, like yearly, monthly, and packaged."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

"Security Hub is not an expensive solution."

"AWS Security Hub's pricing is pretty reasonable."

"The price of the solution is not very competitive but it is reasonable."

"The pricing is fine. It is not an expensive tool."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"The price of AWS Security Hub is average compared to other solutions."

"The pricing has always been competitive. They have always been good to us. They will make it a fight. They don't try to hide anything; it's always been fully transparent and well-worth what we pay for it."

"I've told CRITICALSTART that I think the managed service they provide is cheaper than it should be. It's a really good deal."

"Overall, for what I'm paying for it, and the benefit I'm getting out of it, it is right where it needs to be, if not a little bit in my favor. For what it costs me to actually have this service, I could afford one internal person to do that job, but now I have a team of 10 or more who are doing that job, and they don't sleep because they work shifts."

"It costs a lot for what we felt comfortable to spend."

"The pricing of other services was so insane that they weren't even an option."

"As far as the expense goes, it's very competitive pricing and the services you get are almost like you have a person on your team."

"There are contractual penalties if their SLAs are not met. This commitment was very important in our decision to go with this service, because not having downtime is extremely important to us. The providers has not missed an SLA in the 18 months that I have worked with them."

See which vendors are best for you

Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.

See recommendations

869,566 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at Bell

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Real Estate/Law Firm

14%

Healthcare Company

12%

Manufacturing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	3
Large Enterprise	4

Questions from the Community

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud.

See all answers

What needs improvement with AWS Security Hub?

Regarding how Amazon can improve AWS Security Hub, they have numerous services that are discriminated individually and grouped into packages. However, the sheer number of services can be overwhelmi...

See all answers

Ask a question

Earn 20 points

Comparisons

Microsoft Sentinel vs AWS Security Hub

Compared 37% of the time

Wiz vs AWS Security Hub

Compared 11% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 7% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

Google Cloud Security Command Center vs AWS Security Hub

Compared 3% of the time

More AWS Security Hub Competitors

Red Canary vs CRITICALSTART

Compared 30% of the time

Arctic Wolf Managed Detection and Response vs CRITICALSTART

Compared 28% of the time

ReliaQuest GreyMatter vs CRITICALSTART

Compared 23% of the time

CrowdStrike Falcon Complete MDR vs CRITICALSTART

Compared 20% of the time

More CRITICALSTART Competitors

Product Reports

Buyer's Guide

AWS Security Hub

October 2025

Download AWS Security Hub product report

Buyer's Guide

CRITICALSTART

October 2025

Download CRITICALSTART product report

Also Known As

SQRRL

Critical Start, CriticalStart

Overview

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

The cybersecurity landscape is growing more complex by the day with the arrival of new threats and new tools supposedly designed for combating them. The problem is it’s all creating more noise and confusion for security professionals to sort through.

CRITICALSTART is the only MDR provider committed to eliminating acceptable risk and leaving nothing to chance. They believe that companies should never have to settle for “good enough.” Their award-winning portfolio includes end-to-end Professional Services and Managed Detection and Response (MDR). CRITICALSTART MDR puts a stop to alert fatigue by leveraging the Zero Trust Analytics Platform (ZTAP) plus the industry-leading Trusted Behavior Registry, which eliminates false positives at scale by resolving known-good behaviors. Driven by 24x7x365 human-led, end-to-end monitoring, investigation and remediation of alerts, their on-the-go threat detection and response capabilities are enabled via a fully interactive MOBILESOC app.

Critical Start

Sample Customers

Edmunds, Frame.io, GoDaddy, Realtor.com

Information Not Available

Buyer's Guide

AWS Security Hub vs. CRITICALSTART

September 2025

Free Report: AWS Security Hub vs. CRITICALSTART

Find out what your peers are saying about AWS Security Hub vs. CRITICALSTART and other solutions. Updated: September 2025.

DOWNLOAD NOW

869,566 professionals have used our research since 2012.

See our AWS Security Hub vs. CRITICALSTART report.

See our list of best Security Orchestration Automation and Response (SOAR) vendors.

We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.