AWS Security Hub Extended: Unified Security & Partner Integrations Now Available

AWS has expanded its Security Hub service with the launch of Security Hub Extended, a novel plan designed to streamline the procurement and integration of comprehensive enterprise security solutions. Announced at re:Invent 2025, the Extended plan aims to simplify security for organizations by offering a curated selection of partner solutions alongside AWS’s native security services, like Amazon GuardDuty and Amazon Inspector. This move addresses a common pain point for businesses – the complexity of managing multiple security vendors and procurement cycles.

Consolidating Security Through a Single Pane of Glass

Traditionally, building a full-stack security posture required navigating a fragmented landscape of vendors, contracts, and integration challenges. AWS Security Hub Extended seeks to change that by acting as a central hub for security findings and management. The plan allows organizations to access and deploy solutions from partners like 7AI, Britive, CrowdStrike, Cyera, Island, Noma, Okta, Oligo, Opti, Proofpoint, SailPoint, Splunk, Upwind, and Zscaler directly through the Security Hub console. AWS acts as the seller of record, offering pre-negotiated, pay-as-you-go pricing, a consolidated bill, and eliminating the need for long-term commitments. This simplifies budgeting and reduces administrative overhead.

The core benefit lies in the unified experience. Security findings from both AWS services and integrated partner solutions are emitted in the Open Cybersecurity Schema Framework (OCSF) schema. This standardization allows for automated aggregation and correlation of security data within Security Hub, enabling security teams to quickly identify and respond to risks that might otherwise be missed when siloed across different tools. The OCSF schema is an industry effort to create a common language for security data, improving interoperability between different security products. TechTarget highlighted this as a key takeaway from AWS re:Invent 2025.

How Security Hub Extended Works in Practice

Accessing partner solutions through Security Hub Extended is designed to be straightforward. Users can navigate to the “Extended plan” section within the Security Hub console and review the available partner offerings. Subscribing initiates an automated onboarding process managed by each respective partner. Once onboarded, usage is automatically metered and billed monthly as part of the standard Security Hub invoice. This eliminates the need for separate billing relationships and simplifies financial tracking.

The integration isn’t just about billing. it’s about data consolidation. Security findings from all participating solutions are automatically fed into Security Hub, providing a centralized view of an organization’s security posture. This unified view allows security teams to correlate events, prioritize risks, and respond more effectively to threats. According to AWS, this capability is designed to aid organizations proactively secure applications throughout the development lifecycle.

Impact on Security Operations and Enterprise Support

The Extended plan isn’t solely focused on technical integration. It also aims to improve security operations efficiency. Unified Level 1 support is available for AWS Enterprise Support customers, providing a single point of contact for issues related to both AWS services and integrated partner solutions. This streamlined support model can significantly reduce resolution times and improve overall security responsiveness.

The launch of Security Hub Extended comes at a time when organizations are facing increasing pressure to bolster their security defenses, particularly in the face of growing cyber threats and the expanding adoption of generative AI. AWS notes that global security spending is projected to increase from $213 billion in 2025 to $377 billion by 2028, driven in part by the need to secure AI investments. By simplifying the process of integrating and managing a comprehensive security stack, Security Hub Extended aims to help organizations address these challenges more effectively.

Addressing Complexity and Procurement Challenges

AWS explicitly stated that the Extended plan is a response to customer feedback regarding the complexity of managing multiple security vendors. The traditional procurement process, with its numerous cycles and negotiations, can be time-consuming and resource-intensive. By acting as the seller of record and offering pre-negotiated pricing, AWS aims to alleviate these burdens and allow security teams to focus on their core mission: protecting the organization’s assets.

Availability and Pricing

The AWS Security Hub Extended plan is now generally available in all AWS commercial Regions where Security Hub is offered. Organizations can choose between flexible pay-as-you-go or flat-rate pricing options, with no upfront investments or long-term commitments required. Detailed pricing information can be found on the AWS Security Hub pricing page.

To explore the new features and integrations, users can access the Security Hub console and provide feedback through AWS re:Post for Security Hub or their existing AWS Support channels. The launch of Security Hub Extended represents a significant step towards simplifying enterprise security management and providing organizations with a more unified and efficient approach to protecting their digital assets.