Amazon GuardDuty vs. AWS CloudTrail

AWS CloudTrail

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Amazon GuardDuty	Score 9.9 out of 10	N/A	Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.	N/A
AWS CloudTrail	Score 8.6 out of 10	N/A	AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of an AWS account. With CloudTrail, users can log, continuously monitor, and retain account activity related to actions across AWS infrastructure. CloudTrail provides event history of AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking,…	N/A

Pricing

Amazon GuardDuty

AWS CloudTrail

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
Amazon GuardDuty	AWS CloudTrail
Free Trial
No	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

—

You can view, filter, and download the most recent 90 days of your account activity for all management events in supported AWS services free of charge. You can set up a trail that delivers a single copy of management events in each region free of charge. Once a CloudTrail trail is set up, Amazon S3 charges apply based on your usage. You will be charged for any data events or additional copies of management events recorded in that region. In addition, you can choose CloudTrail Insights by enabling Insights events in your trails. CloudTrail Insights analyzes write management events, and you are charged based on the number of events that are analyzed in that region.

More Pricing Information

Community Pulse
	Amazon GuardDuty	AWS CloudTrail
Considered Both Products	Amazon GuardDuty No answer on this topic	AWS CloudTrail AS Anton Smyslov Product Owner Chose AWS CloudTrail We mainly needed to focus on logging and auditing of AWS services and activity, while Datadog & New Relic are more about performance monitoring and analytics. Moreover, AWS CloudTrail has a seamless integration with AWS, since it's coming from one bucket of products. So having … Incentivized Helpful? Verified User Anonymous Chose AWS CloudTrail For this specific functionality, I am not aware of any other product that can do what [AWS] Cloudtrail does. We did not evaluate any other products. Incentivized Helpful? Verified User Anonymous Chose AWS CloudTrail Our company has not used any alternatives. Within our industry, it seems that AWS CloudTrail is the defacto standard for this type of functionality within the AWS environment. Incentivized Helpful? Verified User Anonymous Chose AWS CloudTrail I think in the end, CloudTrail has more features and you can dive deeper inside the logs so it depends on your usage and what you expect in the end to make the right choice, I would say that both tools are really useful and bring a lot of benefits to I.T. companies. Incentivized Helpful?

Best Alternatives
	Amazon GuardDuty	AWS CloudTrail
Small Businesses	LevelBlue USM Anywhere Score 3.8 out of 10	Armor Score 6.0 out of 10
Medium-sized Companies	CrowdStrike Falcon Score 9.0 out of 10	Druva Security Cloud Score 9.7 out of 10
Enterprises	CrowdStrike Falcon Score 9.0 out of 10	Druva Security Cloud Score 9.7 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Amazon GuardDuty	AWS CloudTrail
Likelihood to Recommend	10.0 (0 ratings)	8.0 (0 ratings)

User Testimonials
	Amazon GuardDuty	AWS CloudTrail
Likelihood to Recommend	In a multi-account/multi-tenant environment, GuardDuty often alerts us to possible malicious traffic before it becomes an issue. The ability to automatically enable GuardDuty creates baseline security which is crucial when an account is first created. It also helps greatly in environments where other users are able to create resources as often GuardDuty alerts us to insecure resources we did not know about. It can however sometimes be a little overzealous with its assessments alerting on benign activity which then requires suppression rules. Incentivized AK Alex Kranz Senior System Administrator Read full review	Most probably it would be suitable for Finance industries, where security is at the head of the table. However, in our case for E-commerce, it's also quite suitable, since we have quite a significant amount of data and usage of AWS services. Especially with usage of AWS services, AWS CloudTrail comes into play as a heavy plus. For instance, troubleshooting any issues in AWS services is really nice. Therefore, it would be less appropriate with a small amount of AWS service usage and some basic web hosting. Incentivized AS Anton Smyslov Product Owner Read full review
Pros	Monitors outgoing connections from AWS resources to known malicious hosts. Monitors incoming connection to AWS resources from known malicious hosts. Integrates with other centralized logging solutions. Incentivized AK Alex Kranz Senior System Administrator Read full review	Logs details Easy implementation Great support Incentivized Verified User Anonymous Read full review
Cons	Does not have the ability to add any custom monitors. Incentivized AK Alex Kranz Senior System Administrator Read full review	Delay User interface, must send logs elsewhere to view them Incentivized Verified User Anonymous Read full review
Alternatives Considered	No answers on this topic	For this specific functionality, I am not aware of any other product that can do what [AWS] Cloudtrail does. We did not evaluate any other products. Incentivized Verified User Anonymous Read full review
Return on Investment	GuardDuty has helped us prevent possible security incidents multiple times which could have caused substantial damage. Incentivized AK Alex Kranz Senior System Administrator Read full review	Saved us from purchasing and managing 3rd party solutions Satisfies Security/Governance requirements No upkeep/maintenance Incentivized Verified User Anonymous Read full review
ScreenShots		AWS CloudTrail Screenshots