Amazon GuardDuty

7.4easy start · #3 of 21
in Cloud Workload Protection Platforms

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you worknot on record

Runs on api, Web.

Amazon GuardDuty is ranked #3 of 21 in cloud workload protection platforms on The Geeks Club. It runs on API, Web. There is no free plan. A free trial is offered.

Amazon GuardDuty plans and pricing

All plans

Amazon GuardDuty Free Pay as you go; charges depend on the volume of logs, events, workloads, or data analyzed, and vary by data source and AWS Region. 30-day free trial in supported Regions for new accounts; protection plans can have separate trials; Malware Protection for Amazon S3 has a free tier without a trial period aws.amazon.com · 2 Oct 2026

Compared on cloud workload protection platforms

Free plan: No

Best Amazon GuardDuty alternatives

See all 12

Calico Cloud 0 of 4 in the starter kit Lesson 17.6 Qualys TotalCloud 0 of 4 in the starter kit Lesson 27.5 Bitdefender Total Security 0 of 4 in the starter kit Lesson 47.4 CrowdStrike Falcon Surface 0 of 4 in the starter kit Lesson 56.9 ARMO Platform 0 of 4 in the starter kit Lesson 66.8 Falco 0 of 4 in the starter kit Lesson 76.8

The record

Purpose: Amazon GuardDuty continuously monitors AWS accounts and workloads for malicious activity and generates detailed security findings.
Detection methods: GuardDuty uses AI, machine learning, anomaly detection, and AWS and third-party threat intelligence to detect threats.
Data sources: GuardDuty analyzes CloudTrail logs, VPC Flow Logs, DNS query logs, S3 data events, Aurora login events, AWS Backup data, AI workload activity, and runtime activity.
Compute protection: Runtime Monitoring covers EKS, ECS workloads including those on Fargate, and EC2 instances.
Malware protection: GuardDuty can scan EC2 attached EBS volumes after suspicious activity and detect potentially harmful uploads to S3 buckets.
AI protection: GuardDuty AI Protection detects threats such as anomalous model invocations, cost harvesting attacks, and prompt injection attempts in Amazon Bedrock and SageMaker workloads.
Integrations: GuardDuty findings can be routed to AWS Security Hub, Amazon EventBridge, Amazon Detective, or third-party solutions.
Security operations: The service provides detailed, actionable alerts designed to integrate with existing event management and workflow systems.
Deployment: Foundational GuardDuty protections require no additional security software or infrastructure to deploy and maintain.
Pricing model: GuardDuty is pay as you go, with prices based on analyzed logs, events, workloads, or data and varying by AWS Region.
Limits: Some features are unavailable in some Regions, and pricing varies by data source and Region.
Intended users: GuardDuty is for organizations seeking threat detection across AWS accounts, workloads, and data, including compute, storage, database, and AI workloads.
Maker history: Amazon Web Services says it launched in 2006.

Where it ranks on The Geeks Club

Is Amazon GuardDuty yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Amazon GuardDuty

Sources

aws.amazon.com/guardduty/· checked 2 Oct 2026
aws.amazon.com/guardduty/features/· checked 2 Oct 2026
aws.amazon.com/guardduty/faqs/· checked 2 Oct 2026
aws.amazon.com/guardduty/pricing/· checked 2 Oct 2026
aws.amazon.com/about-aws/· checked 2 Oct 2026