AWS Security Hub is billed per use with no upfront fee for on-demand rates. Main rates in US East (N. Virginia): $1.50 per vCPU-Months (USD 1.50 per vCPU-Months from 0 to 500 for USE1-RuntimeMonitoredVCPU); $0.0052083 per Instance-hrs ($0.0052083 per EC2 instance-hour for AWS Security Hub Essentials plan); $4.00 per 1M Events ($0.000004 per Event for EventsAnalyzed). Prices from the AWS Price List published November 8, 2026.
On-demand rates in US East (N. Virginia), as AWS lists them in the Price List published November 8, 2026.
Source: AWS Price List file for AWS Security Hub (version 20261108172337), read on November 14, 2026. Prices differ by Region and change without notice; check the AWS pricing page before you commit.
| Rate | Price (USD) | Billed |
|---|---|---|
| USD 1.50 per vCPU-Months from 0 to 500 for USE1-RuntimeMonitoredVCPU in US East (N. Virginia) | $1.50 | per vCPU-Months |
| USD 0.25 per vCPU-Months from 5,000 for USE1-RuntimeMonitoredVCPU in US East (N. Virginia) | $0.25 | per vCPU-Months |
| USD 0.75 per vCPU-Months from 500 to 5,000 for USE1-RuntimeMonitoredVCPU in US East (N. Virginia) | $0.75 | per vCPU-Months |
| $0.0052083 per EC2 instance-hour for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.0052083 | per Instance-hrs |
| $0.000004 per Event for EventsAnalyzed in US East (N. Virginia) | $4.00 | per 1M Events |
| $0.55 per GB from 0 to 1,000 for LogsAnalyzedBytes in US East (N. Virginia) | $0.55 | per GB |
| $0.25 per GB from 1,000 to 10,000 for LogsAnalyzedBytes in US East (N. Virginia) | $0.25 | per GB |
| $0.10 per GB from 10,000 for LogsAnalyzedBytes in US East (N. Virginia) | $0.10 | per GB |
| $0.00174 per Hourly for MonitoredEC2AMI in US East (N. Virginia) | $0.00174 | per Hourly |
| $0.000625 per Lambda function code per hour for AWS Security Hub Essentials Optional Enhanced Capabilities plan in US East (N. Virginia) | $0.000625 | per Hourly |
| $0.000434 per Lambda function per hour for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.000434 | per Hourly |
| $0.0002894 per Monitored Azure Container Image for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.0002894 | per Hourly |
| $0.000434 per Monitored Azure Function App for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.000434 | per Hourly |
| $0.00004167 per Monitored Azure Identity for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.00004167 | per Hourly |
| $0.0052083 per Monitored Azure VM for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.0052083 | per Instance-hrs |
| $0.0002894 per container image per hour for AWS Security Hub Essentials plan in US East (N. Virginia) | $0.0002894 | per Hourly |
| Between 100M and 1000M Evaluation Events for RuleEvaluation in US East (N. Virginia) | $0.05 | per 1M Rule Evaluation Event |
| Between 1M and 100M Evaluation Events for RuleEvaluation in US East (N. Virginia) | $0.10 | per 1M Rule Evaluation Event |
| Over 1000M Evaluation Events for RuleEvaluation in US East (N. Virginia) | $0.015 | per 1M Rule Evaluation Event |
| Finding ingestion events above 10,000 events per account per region per month cost USD0.00003 per event | $30.00 | per 1M Finding Ingestion Events |
| 100,001 to 400,000 security checks per account per region per month cost USD0.0008 per check | $0.0008 | per Security Checks |
| Over 500,000 security checks per account per region per month cost USD0.0005 per check | $0.0005 | per Security Checks |
| The first 100,000 security checks per account per region per month cost USD0.001 per check | $0.001 | per Security Checks |
| $0.0012 per security check for the first 100,000 checks per account per region per month for AWS Security Hub CSPM-Azure in US East (N. Virginia) | $0.0012 | per Security Checks |
| $0.00096 per security check from 100,000 to 500,000 checks per account per region per month for AWS Security Hub CSPM-Azure in US East (N. Virginia) | $0.00096 | per Security Checks |
| $0.0006 per security check over 500,000 checks per account per region per month for AWS Security Hub CSPM-Azure in US East (N. Virginia) | $0.0006 | per Security Checks |
AWS Activate credits pay for eligible AWS services, and AWS Security Hub usage is billed on your AWS invoice like any other service. Activate Founders gives $1,000 to start, up to $5,000; you apply for it yourself. AWS promotional credits do not pay Savings Plans or Reserved Instance upfront fees.
For a larger project on Security Hub, a vetted AWS partner can request funding only partners can file: MAP for a migration, POC to test something, incremental workload funding for new work. For startups that is usually $50K to $150K. Depends on the workload; AWS approves.
| Funding | Who files it | Amount | When it fits |
|---|---|---|---|
| Migration Acceleration Program (MAP) | Your matched AWS partner | $50K to $150K for startups. Depends on the workload; AWS approves. | You are not on AWS yet and want to migrate. |
| Proof of concept (POC) funding | Your matched AWS partner | $50K to $150K for startups. Depends on the workload; AWS approves. | You want to test something, whether or not you are on AWS today. |
| Incremental workload (IW) funding | Your matched AWS partner | $50K to $150K for startups. Depends on the workload; AWS approves. | You are already on AWS and are launching new work: a new AI feature, a new customer or a new contract. |
| AWS Activate Founders | Founder applies | $1,000 to start, up to $5,000 | Self-funded startups with no investor or accelerator behind them. |
| AWS Activate Portfolio | Founder applies | up to $200,000 | Startups backed by a VC firm, accelerator or angel investor that is an AWS Activate Provider. |
| AWS Credits for AI Startups | Invite only (AWS account manager) | $200,000 or more, by invitation | AI startups ready to scale after Activate Portfolio, invited by AWS. |
Enter how much you expect to use in a month. Uses the on-demand rates above (US East (N. Virginia), AWS Price List November 8, 2026). Tiered discounts, free tier allowances and taxes are not included.
A vetted AWS partner checks which AWS funding fits your workload: MAP, POC or incremental workload funding. We reply within 24 hours; your matched partner reaches out within 5 business days.