Sold by: IBM Security
Deployed on AWS
Safeguard critical, sensitive, or regulated data wherever it resides
4.3
Overview
IBM Security Guardium Multi-Cloud Data Protection: Safeguard critical, sensitive, or regulated data wherever it resides.
A Guardium Collector can be run as a standalone instance or as part of scaled, multi-tier architecture utilizing both an Aggregator and Central Manager. An Aggregator allows for data to be consolidated and/or purged from Collectors while a Central Manager enables central administration of all Guardium instances.
Current Guardium customers can use their existing licenses.
New to Guardium? View our interactive demo: https://www.ibm.com/security/resources/guardium-data-protection-demo
We recommend using IBM Security Guardium version 11.2 plus any new fix bundles from Fix Central. Older versions are made available for archival purposes and may contain bugs and/or security vulnerabilities. Security bulletins contain instructions for the security vulnerability addressed therein, and may require upgrading to a newer version. Fix bundles to update this version can be found on IBM Support Fix Central (https://www.ibm.com/support/fixcentral/ ). Link to IBM PSIRT Blog: https://www.ibm.com/blogs/psirt/
Highlights
- Discover sensitive data, harden the environment against vulnerabilities
- Monitor user activity for data and files, providing real-time visibility and threat analytics
- Protect sensitive data using real-time alerting, dynamic masking, blocking, and quarantining
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 12.2.2
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
We do not offer refunds but you can terminate the instance at any time.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
- Login into the CLI a. Use the access key pair associated with the instance i. In Linux run ssh -i <PEM key> cli@<instance IP> ii. In Window/Putty you will need to convert the .pem key to .ppk See https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/putty.html
Resources
Vendor resources
Support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Safeguard critical, sensitive, or regulated data wherever it resides
IBM Guardium Data Protection is a modern, zero-trust data security platform that provides comprehensive protection for sensitive data - no matter where it resides. It supports structured and unstructured data across on-premises, cloud, and hybrid environments, including AWS, DBaaS, mainframes, and file systems.
IBM Guardium Data Protection provides real time visibility, automated protection, and audit ready compliance across hybrid cloud environments. With Guardium Compliance Express, teams can move to an auditor trusted compliance in minutes. Key capabilities include Data Activity Monitoring, Discovery and Classification, Vulnerability Assessments, and Advanced Analytics.
IBM Guardium Data Detection and Response (DDR) is a capability of the IBM Guardium data security platform, delivering real-time threat detection and response. By leveraging an AI-powered engine and advanced analytics. IBM Guardium DDR alerts on risks to your data before they lead to costly breaches.
Customer reviews
Banking
Reliable Data Monitoring and Auditing
Reviewed on Sep 28, 2026
Review provided by G2
What do you like best about the product?
Centralized monitoring makes it easy to keep track of everything, and the auditing process is straightforward.
What do you dislike about the product?
The interface can feel a bit complex at first, and the setup process takes some learning to get comfortable with.
What problems is the product solving and how is that benefiting you?
It makes data monitoring, auditing, and compliance much simpler and easier to manage.
DAYAAN B.
Robust Monitoring, Needs UI Improvement
Reviewed on Sep 28, 2026
Review provided by G2
What do you like best about the product?
I like IBM Guardium Data Protection for its activity monitoring and real-time threat detection capabilities.
What do you dislike about the product?
I find the user interface of IBM Guardium Data Protection to be quite complex, which can make navigation challenging. Things like visual clutter and inconsistent design across different pages can be distracting and time-consuming to deal with. Additionally, the initial setup was a bit daunting due to its complexity and intensity.
What problems is the product solving and how is that benefiting you?
I use IBM Guardium Data Protection for data visibility, real-time threat mitigation, and regulatory compliance.
Consumer Services
Powerful End-to-End Data Protection, but Setup and Administration Can Be Complex
Reviewed on Sep 27, 2026
Review provided by G2
What do you like best about the product?
What I like most about IBM Guardium Data Protection is that it addresses data security from a pragmatic end-to-end point of view. The tool goes beyond the mere identification of vulnerabilities by focusing on the actual sensitive data, its owners, and authorized users and how they treat this information. Monitoring, auditing, and compliance features are also compelling from the perspective of my daily job.
What do you dislike about the product?
The main negative thing about Guardium is that it can be complex to configure and administer, especially for environments that are large or that involve many data sources. It has a great number of features, which is good to see, but that could make the product appear as something too complicated for a company that wants an easy solution for monitoring critical data. I find that this aspect could be improved to make the product more accessible for everyday use.
What problems is the product solving and how is that benefiting you?
Guardium is a great solution for such cases when there is no visibility of sensitive information and its access. In the field of security, the aspect of where the data is, who has access to it, and who has unauthorized access is of great importance. The tools for monitoring, auditing, and alarms help me detect and analyze anomalies, investigate events, incidents, and ensure compliance without spending much time on manual checks.
SHASHANK S.
Strong Data Security with Easy Monitoring
Reviewed on Sep 26, 2026
Review provided by G2
What do you like best about the product?
I like IBM Guardium Data Protection for its strong data security capabilities, especially real-time monitoring, data activity tracking, and threat detection. Its centralized visibility and user-friendly monitoring make it easier to identify suspicious access and protect sensitive data across databases and environments.
What do you dislike about the product?
One area I find challenging is the initial setup and configuration, especially when integrating Guardium with multiple databases and complex environments. It can require some time to fine-tune policies, agents, and monitoring rules. The solution is powerful, but the learning curve can be a little steep for new users.
What problems is the product solving and how is that benefiting you?
IBM Guardium Data Protection helps us protect sensitive data by providing better visibility into data access and user activity. It helps identify unusual or risky behavior early and supports compliance by simplifying monitoring, auditing, and reporting. This makes it easier for us to manage data security and respond to potential risks.
Pratyank C.
Robust Data Security with Room for Deployment Improvement
Reviewed on Sep 26, 2026
Review provided by G2
What do you like best about the product?
I really appreciate IBM Guardium Data Protection because it's a great tool for data protection. It allows me to protect my sensitive data without any loss or breach. The integration across several categories, such as the IBM ecosystem, IT security, ticketing platforms, and cloud and hybrid data sources, creates a unified data security and incident response workflow, which works really well for my needs.
What do you dislike about the product?
While IBM Guardium Data Protection is an industry standard for database security, administrators and security teams frequently highlight several operational challenges and areas for improvement such as complex deployment and steep learning curve, S-tap agent overhead and maintenance, and cloud naive adaptation. The initial setup is generally considered complex and demanding, often requiring dedicated expertise and careful planning.
What problems is the product solving and how is that benefiting you?
I use IBM Guardium Data Protection to monitor and protect sensitive data, identify it, and ensure compliance. It provides essential visibility into data storage and access, detects suspicious activities, and reduces the risk of breaches, seamlessly integrating within multiple security workflows.