AWS Security Incident Response pricing
Pricing overview
AWS Security Incident Response helps you prepare for, respond to, and recover from security events faster and more effectively. The service combines automated security finding monitoring and triage, AI-powered investigation, and containment with 24/7 direct access to the AWS Customer Incident Response Team (CIRT).
Pricing is based on the number of security findings ingested from Amazon GuardDuty and supported third-party detection tools through AWS Security Hub. The first 10,000 findings per month are free. Beyond that, findings are billed at rates that decrease with volume.
You can cancel your service membership at any time. If you do, your membership will remain active until the end of the current billing cycle, which coincides with the end of the month. Once your membership is fully cancelled at month’s end, all active investigations, cases, and other resources will be closed.
Pricing details
|
Tier
|
Monthly Security Finding Ingestion
|
Service Price
|
|---|---|---|
|
Free Tier
|
First 10K
|
Free |
|
Tier 1
|
Next 100K
|
$0.000676 per finding ingested
|
|
Tier 2
|
Next 500K |
$0.000538 per finding ingested |
|
Tier 3
|
Above 610K
|
$0.000430 per finding ingested
|
Pricing examples
Monthly findings: 8,000
- First 10,000 findings: $0 (Free Tier)
Total monthly cost: $0
Monthly findings: 300,000
- First 10,000 findings: $0 (Free Tier)
- Next 100,000 findings: $67.60 (Tier 1 at $0.000676 per finding)
- Next 190,000 findings: $102.22 (Tier 2 at $0.000538 per finding)
Total monthly cost: $169.82
Monthly findings: 2,000,000
- First 10,000 findings: $0 (Free Tier)
- Next 100,000 findings: $67.60 (Tier 1 at $0.000676 per finding)
- Next 500,000 findings: $269.00 (Tier 2 at $0.000538 per finding)
- Final 1,390,000 findings: $597.70 (Tier 3 at $0.000430 per finding)
Total monthly cost: $934.30