Amazon GuardDuty
7.6#1 in cloud detection and response softwareFrom $0.03 a monthFree planWebAPILinux
VisitAmazon GuardDuty vs Tracee
What both publish
| Fact | Amazon GuardDuty | Tracee |
|---|---|---|
| Deployment | Foundational GuardDuty protections require no additional security software or infrastructure to deploy and maintain. | Tracee is available as an executable binary, a Docker Hub container image, and a Helm chart in Aqua Security's registry. |
| Integrations | GuardDuty findings can be routed to AWS Security Hub, Amazon EventBridge, Amazon Detective, or third-party solutions. | Tracee supports Prometheus scraping by default, with metrics available at :3366/metrics. |
Amazon GuardDuty plans
- 30-day free trialFree
- Amazon GuardDutyFree
- Malware Protection for EBS$0.03 a month
- Malware Protection for S3$0.09 a month
- Foundational threat detection — VPC Flow Logs and DNS query logs$1 a month
- Foundational threat detection — CloudTrail management events$4 a month
Tracee plans
- TraceeFree
Pick Amazon GuardDuty if…
It suits organizations seeking threat detection across AWS accounts, compute, storage, database, and AI workloads. Teams that need findings routed into existing security or event workflows may also find its integrations relevant.
Pick Tracee if…
Tracee suits teams that need Linux runtime security monitoring, including for Kubernetes, compliance, troubleshooting, or forensic work. It requires a compatible Linux kernel and elevated capabilities.