Warning: This service is currently available in the ap-northeast-2 (Seoul) region only (expanding to other regions soon).
Security Hero RMF (Risk Management Framework) is a comprehensive AWS cloud security management system based on NIST Risk Management Framework that automatically analyzes cloud environments to generate interactive topology diagrams and perform quantitative risk assessments. The platform provides integrated network topology visualization and compliance-based security evaluation through international standard frameworks including NIST 800-53, MITRE ATT&CK, and EPSS.
This service is currently available in the ap-northeast-2 (Seoul) region only (expanding to other regions soon).
Security Hero RMF (Risk Management Framework) is an advanced cloud security management platform designed to provide comprehensive visibility and risk assessment capabilities for AWS cloud environments. The system automatically discovers and synchronizes cloud assets across 12 AWS services and 17 resource types, creating a unified security management dashboard that integrates seamlessly with existing cloud infrastructure. The platform's core strength lies in its three primary capabilities: automated cloud asset synchronization, interactive network topology visualization, and quantitative risk assessment. The topology generation engine creates real-time visual representations of complex AWS network relationships, including VPC connections, subnet configurations, and inter-service dependencies. The risk assessment component leverages multiple international security frameworks (NIST 800-53, NIST 800-30, MITRE ATT&CK) combined with CVE databases and EPSS (Exploit Prediction Scoring System) scores to provide data-driven, quantitative security risk evaluations. This compliance-based approach enables organizations to make informed decisions about their cloud security posture while maintaining adherence to established cybersecurity standards and best practices.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You choose from three tiers billed under a contract. Each tier sets how many assets you can manage and how often you can scan. Basic manages 30 assets with 3 scans total and basic visualization. Pro manages 300 assets with 3 scans per day and detailed reporting. Enterprise removes the asset and scan limits and adds a dedicated technical manager under a service-level agreement. Pricing scales as your asset count, scan frequency, and support needs grow. All tiers connect to your cloud account without installing software on your infrastructure.
Top-of-mind questions for buyers
What counts as one asset for billing under the Basic and Pro tiers?
An asset is a cloud resource in your connected AWS account that the tool scans for risk. Basic covers 30 assets. Pro covers 300 assets. Enterprise removes the asset cap. The tool reads your account externally, so no software installs on your infrastructure.
What happens if I reach my tier's asset or scan limit?
Each tier caps assets and scans. Basic allows 3 scans total. Pro allows 3 scans per day for up to 300 assets. Enterprise removes both limits. To manage more assets or run more scans, you move to a tier that supports the higher count.
What do I get with the Enterprise tier that the other tiers do not include?
Enterprise removes the asset and scan limits, so you can manage unlimited assets and run scans without a daily cap. It also adds a dedicated technical manager under a service-level agreement. Basic offers basic visualization, while Pro adds detailed reporting.
cloud.securityhero.site
Helpful?
Vendor refund policy
Limited refunds
"Refunds may be issued at our discretion only for duplicate charges or billing errors. Please contact support within 7 days of the charge date."
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.