AWS Security Hub vs Sweet Security comparison

Amazon Web Services (AWS) and Sweet Security are both solutions in the Cloud Security Posture Management (CSPM) category. Amazon Web Services (AWS) is ranked #16 with an average rating of 7.6, while Sweet Security is ranked #25 with an average rating of 9.0. Amazon Web Services (AWS) holds a 3.9% mindshare in CSPM, compared to Sweet Security’s 0.9% mindshare. Additionally, 89% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 100% of Sweet Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between AWS Security Hub and Sweet Security based on real PeerSpot user reviews.

Find out in this report how the two Cloud Security Posture Management (CSPM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed AWS Security Hub vs. Sweet Security Report (Updated: December 2025).

Buyer's Guide

AWS Security Hub vs. Sweet Security

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of January 2026, in the Cloud Security Posture Management (CSPM) category, the mindshare of SentinelOne Singularity Cloud Security is 4.0%, up from 2.1% compared to the previous year. The mindshare of AWS Security Hub is 3.9%, down from 4.6% compared to the previous year. The mindshare of Sweet Security is 0.9%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Security Posture Management (CSPM) Market Share Distribution
Product	Market Share (%)
SentinelOne Singularity Cloud Security	4.0%
AWS Security Hub	3.9%
Sweet Security	0.9%
Other	91.2%

Cloud Security Posture Management (CSPM)

Featured Reviews

Satyavijay Chavan

Information Security Engineer at DataVigilant Infotech

Enables us to prioritize and effectively address critical security issues

Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.

Read full review

Karthik Ekambaram

Director at Scybers

Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.

Read full review

reviewer2761083

Director of Security Operations at a tech vendor with 501-1,000 employees

Has reduced investigation time by correlating application and infrastructure events

Sweet Security has room for improvement in two areas. One is for robust integration with automations and playbooks. We have our internally developed platform that operates around security incident playbooks, so the connection between those two systems would be great. The option to run specific playbooks through the Sweet Security platform would help us a lot, but these must be fully customizable. We prefer not to block the business from progressing unless we are fully sure that it is an incident. Most of the actions I would take would revolve around containment or notification on a specific platform and not via email or similar communications. The second area is around the code perspective. I know it's just the start of a long journey that Sweet Security is going to go through to become a platform that also handles code, but I would expect options for a complete analysis and writing policies for infrastructure as code. The next great thing that Sweet Security can do is to turn toward IAC, how it is handled and enforced, to tackle potential breaches of policy before they really happen.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Visibility is the most important aspect."

"Cloud Security has provided a single view to observe all workloads, prioritization for handling cloud assets, and reduced noise by distinguishing false positives effectively."

"We're monitoring several cloud accounts with Singularity. It is convenient to identify issues or security failures in any account. It's nice to have all the details we need to solve these issues."

"The user interface is well-designed and easy to navigate."

"Cloud Native Security helps us discover vulnerabilities in a cloud environment like open ports that allow people to attack our environment. If someone unintentionally opens a port, we are exposed. Cloud Native Security alerts us so we can remediate the problem. We can also automate it so that Cloud Native Security will fix it."

"We really appreciate the Slack integration. When we have an incident, we get an instant notification. We also use Joe Sandbox, which Singularity can integrate with, so we can verify if a threat is legitimate."

"The most valuable aspect of Singularity Cloud Security is its unified dashboard."

"The features that stand out are threat detection using advanced artificial intelligence and machine learning, helping to identify and respond to threats in real-time."

More SentinelOne Singularity Cloud Security pros

"I rate Security Hub ten out of ten for stability."

"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."

"Finding out if your infrastructure is secure is a valuable feature."

"One of the most effective features of AWS Security Hub is the easy access to a dashboard with a ready-to-use security score."

"It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."

"Very good at detection and providing real-time alerts."

"The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings."

"AWS Security Hub provides comprehensive alerts about potential compliance issues with CIS standards. The integration with third-party tools is another excellent feature. All our workloads are on AWS."

More AWS Security Hub pros

"The value we see from having real-time visibility into our cloud environment is significant, as Sweet Security serves as our eyes and ears inside AWS, telling us what we are doing wrong so we can fix it."

"The value of having real-time visibility in our cloud environment with Sweet Security changes everything because it differentiates between identifying and reacting to something that is not really a risk and something that is truly a risk that needs to be treated."

"Before we had Sweet Security, upon any type of detection of activity, we needed to conduct lots of investigations in different platforms and logs until we could build the larger picture, but once we inserted Sweet Security, we are able to actually see each and every request being made from the application level towards the infrastructure, making it much easier and reducing the time for an analyst to understand what's really happening."

Cons

"They can add more widgets to its dashboard. A centralized dashboard with numerous metrics would improve user understanding."

"There can be a specific type of alert showing that a new type of risk has been identified."

"For vulnerabilities, they are showing CVE ID. The naming convention should be better so that it indicates the container where a vulnerability is present. Currently, they are only showing CVE ID, but the same CVE ID might be present in multiple containers. We would like to have the container name so that we can easily fix the issue."

"There is room for improvement in application security posture management features, and SentinelOne Singularity Cloud Security is on the costlier side."

"I would like to see the map feature improve. It's good, but it isn't fully developed. It lets us use custom resources and policies but does not allow us to perform some actions. I would also like more custom integration and runtime security for Kubernetes."

"SentinelOne Singularity Cloud Security is an excellent CSSPM tool, but the CSC CWPP features need improvement."

"I find the platform somewhat clunky at times, and SentinelOne Singularity Cloud Security does not always give me accurate data, which could also be due to fine tuning on our end."

"SentinelOne Singularity Cloud Security could be improved with easier integrations to the Singularity Data Lake, particularly for various vendors."

More SentinelOne Singularity Cloud Security cons

"The telemetry doesn't always go into the control center. When you have multiple instances running in AWS, you need a control tower to take feeds from Security Hub and analyze your results. Sometimes exemptions aren't passed between the control tower and Security Hub. The configuration gets mixed up or you don't get the desired results."

"The support must be quicker."

"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."

"Whenever my team gets some alarms from the central team, my team needs to initiate whether it's a real or false trigger. The central team needs to keep adjusting to the parameters or at least the concerned IPs, whether it's really from the company's pool of IPs, so the trigger process can be improved. In the next release of AWS Security Hub, I'd like a better dashboard that could result in better alert visibility."

"We need more granular-level customizations to enable or disable the rules in AWS Security Hub."

"It is not flexible for multi-cloud environments."

"Although AWS Security Hub does a periodic scan of your overall infrastructure, it doesn't do it in real time."

"There is room for improvement in implementing AI capabilities."

More AWS Security Hub cons

"There was something a year ago that caused a production issue in my company, but they fixed it within an hour."

"The option to run specific playbooks through Sweet Security platform would help us a lot, but these must be fully customizable."

"One area for improvement could be the alerts, as we have an issue with the alert time, the time it takes for the system to send the alert, but besides that, there is nothing special."

Pricing and Cost Advice

"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."

"It is a little expensive. I would rate it a four out of ten for pricing."

"PingSafe is priced reasonably for our workload."

"I am not involved in the pricing, but it is cost-effective."

"The cost for PingSafe is average when compared to other CSPM tools."

"I would rate the cost a seven out of ten with ten being the most costly."

"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."

"The price depends on the extension of the solution that you want to buy. If you want to buy just EDR, the price is less. XDR is a little bit more expensive. There are going to be different add-ons for Singularity."

More SentinelOne Singularity Cloud Security pricing and cost advice

"There are multiple subscription models, like yearly, monthly, and packaged."

"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."

"AWS Security Hub's pricing is pretty reasonable."

"The price of the solution is not very competitive but it is reasonable."

"The price of AWS Security Hub is average compared to other solutions."

"The pricing is fine. It is not an expensive tool."

"Security Hub is not an expensive solution."

"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Security Posture Management (CSPM) solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Comparison Review

it_user186927

Director of Operations at a comms service provider with 10,001+ employees

Feb 16, 2015

Cybereason vs. Interset vs. SQRRL

Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

12%

Manufacturing Company

10%

Government

Computer Software Company

12%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Wellness & Fitness Company

14%

Healthcare Company

11%

Financial Services Firm

Non Profit

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	48
Midsize Enterprise	21
Large Enterprise	54

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

I think the pricing of SentinelOne Singularity Cloud Security is a bit high.

See all answers

What needs improvement with PingSafe?

We did not try to use the threat investigations feature from SentinelOne Singularity Cloud Security.Drift detection w...

See all answers

Which is better - Azure Sentinel or AWS Security Hub?

We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...

See all answers

What do you like most about AWS Security Hub?

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances...

See all answers

What needs improvement with AWS Security Hub?

AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other pro...

See all answers

What is your experience regarding pricing and costs for Sweet Security?

I'm not really into the specifics of the pricing, but as far as I know, it is cost-effective.

See all answers

What needs improvement with Sweet Security?

Sweet Security has room for improvement in two areas. One is for robust integration with automations and playbooks. W...

See all answers

What is your primary use case for Sweet Security?

We are cloud native and are using Sweet Security for call runtime protection. It is much bigger than just runtime pro...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 10% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 10% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 5% of the time

Cortex Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 2% of the time

More SentinelOne Singularity Cloud Security Competitors

Microsoft Sentinel vs AWS Security Hub

Compared 35% of the time

Wiz vs AWS Security Hub

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs AWS Security Hub

Compared 8% of the time

Microsoft Defender for Cloud vs AWS Security Hub

Compared 5% of the time

Tenable Cloud Security vs AWS Security Hub

Compared 2% of the time

More AWS Security Hub Competitors

Upwind vs Sweet Security

Compared 35% of the time

Wiz vs Sweet Security

Compared 31% of the time

Prisma Cloud by Palo Alto Networks vs Sweet Security

Compared 11% of the time

Orca Security vs Sweet Security

Compared 8% of the time

Stream.Security vs Sweet Security

Compared 6% of the time

More Sweet Security Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

January 2026

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

AWS Security Hub

January 2026

Download AWS Security Hub product report

Buyer's Guide

Sweet Security

January 2026

Download Sweet Security product report

Also Known As

PingSafe

SQRRL

No data available

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

AWS Security Hub is a comprehensive security service that provides a centralized view of security alerts and compliance status across an AWS environment. It collects data from various AWS services, partner solutions, and AWS Marketplace products to provide a holistic view of security posture. With Security Hub, users can quickly identify and prioritize security issues, automate compliance checks, and streamline remediation efforts.

The service offers a range of features including continuous monitoring, threat intelligence integration, and customizable dashboards. It also provides automated insights and recommendations to help users improve their security posture. Security Hub integrates with other AWS services like Amazon GuardDuty, AWS Config, and AWS Macie to provide a unified security experience. Additionally, it supports integration with third-party security tools through its API, allowing users to leverage their existing security investments.

With its user-friendly interface and powerful capabilities, AWS Security Hub is a valuable tool for organizations looking to enhance their security and compliance posture in the cloud.

Amazon Web Services (AWS)

Sweet Security offers a robust cybersecurity solution designed to safeguard sensitive data with advanced monitoring features, enhancing organization-wide security protocols.

The comprehensive features of Sweet Security include real-time threat intelligence, automated incident response, and seamless integration with existing IT infrastructures. Engineered for flexibility and scalability, it effectively adapts to evolving cybersecurity landscapes, delivering actionable insights for proactive security management.

What are the key features of Sweet Security?

Real-Time Threat Intelligence: Continuously monitors network traffic for potential threats.
Automated Incident Response: Rapidly responds to security incidents to minimize impact.
Seamless Integration: Easily integrates with existing systems without disruption.
Advanced Analytics: Provides detailed analysis to predict and preempt security breaches.

What benefits can users expect?

Enhanced Security: Strengthens overall data protection and reduces vulnerability.
Cost Efficiency: Reduces expenses with automated processes and efficient resource use.
Improved Compliance: Helps meet regulatory requirements through comprehensive monitoring.
Increased Trust: Builds user confidence by ensuring high standards of data security.

Sweet Security is implemented across industries such as finance and healthcare to guard sensitive information and comply with stringent regulations. Its adaptability allows customization to meet specific industry standards, addressing unique security challenges while maintaining high levels of protection.

Sweet Security

Sample Customers

Information Not Available

Edmunds, Frame.io, GoDaddy, Realtor.com

Information Not Available

Buyer's Guide

AWS Security Hub vs. Sweet Security

December 2025

Free Report: AWS Security Hub vs. Sweet Security

Find out what your peers are saying about AWS Security Hub vs. Sweet Security and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our AWS Security Hub vs. Sweet Security report.

See our list of best Cloud Security Posture Management (CSPM) vendors, best Cloud Security Posture Management (CSPM) vendors, and best Cloud Workload Protection Platforms (CWPP) vendors.

We monitor all Cloud Security Posture Management (CSPM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.