Try our new research platform with insights from 80,000+ expert users

AWS Security Hub vs ThreatConnect Threat Intelligence Platform (TIP) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Ranking in Security Orchestration Automation and Response (SOAR)
6th
Average Rating
8.6
Reviews Sentiment
5.9
Number of Reviews
5
Ranking in other categories
AI-SOC (7th), AI-Powered Security Automation (2nd)
AWS Security Hub
Ranking in Security Orchestration Automation and Response (SOAR)
7th
Average Rating
7.6
Reviews Sentiment
6.5
Number of Reviews
26
Ranking in other categories
Cloud Security Posture Management (CSPM) (15th)
ThreatConnect Threat Intell...
Ranking in Security Orchestration Automation and Response (SOAR)
15th
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
8
Ranking in other categories
Threat Intelligence Platforms (TIP) (6th)
 

Mindshare comparison

As of February 2026, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Torq is 4.5%, down from 4.8% compared to the previous year. The mindshare of AWS Security Hub is 6.5%, down from 9.9% compared to the previous year. The mindshare of ThreatConnect Threat Intelligence Platform (TIP) is 2.5%, up from 1.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR) Market Share Distribution
ProductMarket Share (%)
Torq4.5%
AWS Security Hub6.5%
ThreatConnect Threat Intelligence Platform (TIP)2.5%
Other86.5%
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Nimrod Vardi - PeerSpot reviewer
Global IT Director at OpenWeb
Automation workflows have transformed our IT, enabling secure just-in-time access control
We work with them quite often, so we have a direct line regarding areas in Torq that have room for improvement. If we have a feature request, we can request it. I do not have anything in mind at the moment. We were a design partner for a short while, so we feel that they listen and that users of the system have an impact on the way the system is designed for the better. They have a new community, which is something that I personally suggested years ago. There are many people like me in different places and they might have already built the workflow that I need. Having the option to share workflows or to jump on a thread and say I have this need, did anyone ever build a workflow for it, is amazing. Someone would jump in and say yes, sure, here, take this workflow. I think this is an amazing thing and I really hope that the community will come alive because I think this is really powerful. This is something that I already suggested and it did happen eventually, and I am quite happy with it. I do not have any specific feature in mind that I have a need for at the moment.
Karthik Ekambaram - PeerSpot reviewer
Director at Scybers
Has helped identify misconfigurations and prioritize risks but lacks multi-cloud support and deeper integration features
AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other products in the market for CSPM that can give you multi-cloud environment misconfigurations, even Microsoft for that matter. Regarding the integration of AWS Security Hub with third-party tools, I am not certain whether we can integrate them, but there is no need to do so. However, AWS Security Hub cannot integrate with other cloud providers, so it only supports the AWS environment. The compliance checks within AWS Security Hub are good, but we don't use them much. We utilize compliance frameworks such as CIS compliance frameworks and ISO 27017 framework, which are beneficial, but it can improve in other areas too, such as including NIST and other frameworks beyond just ISO and CIS. Improvements can be applicable for scalability, particularly on integration with multi-cloud environments, and compliance frameworks can be added for more variety as well. The unified dashboard in AWS Security Hub is adequate; I cannot say it is exceptional, but the content available in the dashboards is satisfactory for now.
Vyas Shubham - PeerSpot reviewer
Product Analyst at a consultancy with 51-200 employees
Centralized threat insights have streamlined detection and automated phishing response
Based on my experience, ThreatConnect Threat Intelligence Platform (TIP) is already doing a great job in the market by decreasing threats from external sources. A few improvements I would suggest include integration enhancements, as users report that some integrations could be tighter or easier to configure. Additionally, plug and play connectors for popular security tools and threat feeds could streamline operations. There could also be easier event generation and sharing, as some reviewers mentioned that generating and sharing events or intelligence with internal teams or external partners is not as smooth as it could be. Improved pricing or tiered options could make it more accessible, especially for smaller organizations that do not require all enterprise features. Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks. A more intuitive UI that aligns with typical analyst workflows would reduce the learning curve and boost productivity. To improve my rating closer to ten, the user interface can be simplified, as it is complex. Enhancing user experience and providing richer enrichment sources would further increase its value. Addressing these areas would make the platform more intuitive, comprehensive, and easier to adopt across all teams.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"As an analyst, it has demonstrated potential to reduce workforce requirements and time needed for related activities."
"Once I started to use the system and I saw the potential, it changed all of our work in IT."
"If I review about 100 vendors that I might work with, Torq is definitely in the top five that gave me personally investment back, just because every bit of effort I put into Torq eventually became a workflow that gave it back to me."
"What I appreciate most about Torq is that it is an essential part of our system."
"Using that one piece of AI, we auto-closed 511 cases in quarter four alone."
"Easily integrates with third-party tools"
"Finding out if your infrastructure is secure is a valuable feature."
"Currently, our organization utilizes AWS for various purposes, including SaaS (Software as a Service), PaaS (Platform as a Service), and hosting applications in the cloud. We develop our applications and use AWS services as a platform for basic functions and secondary development needs. Additionally, we rely on PaaS for accounting services. Approximately, 50% of our applications are hosted in the cloud environment, making it a significant part of our current setup."
"It's a security posture management tool from AWS. Basically, it identifies misconfigurations, similar to Trusted Advisor but on a larger scale."
"AWS Security Hub brings many features into one table that is quite useful, and the app team finds it easier to see what is missing."
"AWS Security Hub has very good integration features. It allows for AWS native services integration, and it helps us to integrate some of the services outside of AWS. They have partners, such as Amazon Preferred Network Partners (APN). If you have different security tools around APN, we can integrate those findings with AWS Security Hub reducing the need to refer to different portals or different UIs. You can have AWS Security Hub act as a single common go-to dashboard."
"The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud."
"I find all of the features to be highly valuable."
"ThreatConnect Threat Intelligence Platform (TIP) has a significant positive impact on our organization by improving our ability to detect, prioritize, and respond to threats quickly through centralized and enriched threat intelligence."
"ThreatConnect Threat Intelligence Platform (TIP) has a significant positive impact on our organization by improving our ability to detect, prioritize, and respond to threats quickly through centralized and enriched threat intelligence."
"It's a solid platform and is stable enough. It is not complicated and is easy to use."
"I like their customer support."
"The tool's installation, integration, and playbooks are very straightforward."
"ThreatConnect Threat Intelligence Platform (TIP) has positively impacted our organization by significantly reducing response times and improving detection accuracy by ensuring only high-confidence, context-rich indicators are pushed to security controls."
"We have been able to see a return on investment as our clients believe in us more."
"ThreatConnect has a highly user-friendly interface."
 

Cons

"The initial deployment of Torq was not easy."
"Even now, we have workflows that are in production that use AI steps and I get different results, making it unusable to some degree."
"It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet."
"Regarding stability, I have noticed some lagging, crashing, and downtime, which is one of my largest gripes."
"There is room for improvement in implementing AI capabilities."
"Adding SIEM features would be beneficial because of the limited customization of AWS Security Hub."
"Security Hub is currently not worth investing in, as it requires more configurations and integration with other services to work effectively."
"It is not flexible for multi-cloud environments."
"Many findings are too generic or irrelevant to the environment, which can lead to false positives."
"One aspect that could be improved in the solution is its adaptability to different markets and geopolitical restrictions. In certain regions like Thailand, specific services from certain countries or providers, such as AWS or Azure, might be limited or blocked. It also needs improvement in would require configuring the solution more adaptable to AWS infrastructure and function."
"The solution should be easier to learn and use"
"The solution will only give you insight if you have configure rule enabled. It should work more like Prisma Cloud and Dome9 which have a better approach."
"Integration is an area that could use some improvement."
"Support is an area with which nobody is ever fully satisfied, so it can be improved."
"ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic."
"I couldn’t get any training videos online when I was working with the tool."
"Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks."
"Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks."
"I would like to see improvements in the time zone support of their customer service, considering users are from different time zones."
"Sometimes, when using the solution, it slows down, affecting our ability to mitigate threats."
 

Pricing and Cost Advice

Information not available
"The price of AWS Security Hub is average compared to other solutions."
"AWS Security Hub's pricing is pretty reasonable."
"The cost is based on the number of compliances, core checks, and services required, and for more than 10,000 recommendations, the charge is just one dollar."
"The price of the solution is not very competitive but it is reasonable."
"Security Hub is not an expensive solution."
"The pricing is fine. It is not an expensive tool."
"AWS Security Hub is not an expensive tool. I would consider it to be a cheap solution. AWS Security Hub follows the PAYG pricing model, meaning you will have to pay for whatever you use."
"There are multiple subscription models, like yearly, monthly, and packaged."
"The price of this product is in the mid-range, not too expensive, nor inexpensive."
"The tool is expensive."
"I rate the product price as six on a scale of one to ten, where one is extremely expensive, and ten means it is cheap."
"The price could be better."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Director of Operations at a comms service provider with 10,001+ employees
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Comms Service Provider
8%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
11%
Computer Software Company
11%
Manufacturing Company
10%
Government
7%
Financial Services Firm
17%
Comms Service Provider
7%
Retailer
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise12
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise23
Large Enterprise4
 

Questions from the Community

What needs improvement with Torq?
Regarding the downsides of Torq, one issue is that as a SaaS product, I sometimes encounter transparency issues about...
What is your primary use case for Torq?
My role is Cyber Security Engineer, and we use Torq for our case management platform, automating some of our phishing...
What advice do you have for others considering Torq?
Torq's maintenance requirements depend on how you define maintenance. While Torq handles the platform's overall relia...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...
What do you like most about AWS Security Hub?
The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances...
What needs improvement with AWS Security Hub?
AWS Security Hub cannot scale up to multiple different cloud environments; it only works for AWS. There are other pro...
What needs improvement with ThreatConnect Threat Intelligence Platform (TIP)?
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit da...
What is your primary use case for ThreatConnect Threat Intelligence Platform (TIP)?
ThreatConnect Threat Intelligence Platform (TIP) serves as the primary platform in our organization for IOC aggregati...
 

Also Known As

No data available
SQRRL
No data available
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Edmunds, Frame.io, GoDaddy, Realtor.com
Customer Case Studies & Use Cases
Find out what your peers are saying about AWS Security Hub vs. ThreatConnect Threat Intelligence Platform (TIP) and other solutions. Updated: December 2025.
881,733 professionals have used our research since 2012.