Amazon GuardDuty

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Amazon GuardDuty is ranked #5 of 21 in cloud workload protection platforms on Inferse. It runs on API, Web. There is no free plan. A free trial is offered.

Compared on cloud workload protection platforms

Free plan: Noaws.amazon.com

Facts

Purpose: Amazon GuardDuty continuously monitors AWS accounts and workloads for malicious activity and generates detailed security findings.aws.amazon.com · 2 Oct 2026
Detection methods: GuardDuty uses AI, machine learning, anomaly detection, and AWS and third-party threat intelligence to detect threats.aws.amazon.com · 2 Oct 2026
Data sources: GuardDuty analyzes CloudTrail logs, VPC Flow Logs, DNS query logs, S3 data events, Aurora login events, AWS Backup data, AI workload activity, and runtime activity.aws.amazon.com · 2 Oct 2026
Compute protection: Runtime Monitoring covers EKS, ECS workloads including those on Fargate, and EC2 instances.aws.amazon.com · 2 Oct 2026
Malware protection: GuardDuty can scan EC2 attached EBS volumes after suspicious activity and detect potentially harmful uploads to S3 buckets.aws.amazon.com · 2 Oct 2026
AI protection: GuardDuty AI Protection detects threats such as anomalous model invocations, cost harvesting attacks, and prompt injection attempts in Amazon Bedrock and SageMaker workloads.aws.amazon.com · 2 Oct 2026
Integrations: GuardDuty findings can be routed to AWS Security Hub, Amazon EventBridge, Amazon Detective, or third-party solutions.aws.amazon.com · 2 Oct 2026
Security operations: The service provides detailed, actionable alerts designed to integrate with existing event management and workflow systems.aws.amazon.com · 2 Oct 2026
Deployment: Foundational GuardDuty protections require no additional security software or infrastructure to deploy and maintain.aws.amazon.com · 2 Oct 2026
Pricing model: GuardDuty is pay as you go, with prices based on analyzed logs, events, workloads, or data and varying by AWS Region.aws.amazon.com · 2 Oct 2026
Limits: Some features are unavailable in some Regions, and pricing varies by data source and Region.aws.amazon.com · 2 Oct 2026
Intended users: GuardDuty is for organizations seeking threat detection across AWS accounts, workloads, and data, including compute, storage, database, and AI workloads.aws.amazon.com · 2 Oct 2026
Maker history: Amazon Web Services says it launched in 2006.aws.amazon.com · 2 Oct 2026