We invited a direct competitor into Security Hub Extended. Here’s why.

AWS Security Hub Extended now includes Upwind, a cloud security company offering runtime-first workload protection, demonstrating AWS's commitment to customer choice even when solutions overlap with AWS offerings.

• Upwind uses eBPF-based sensors to monitor real-time workload behavior, process activity, and API calls in the Linux kernel
• Customers can choose Security Hub Essentials for posture management, Upwind for runtime protection, or both for stronger outcomes
• Security Hub Extended partners integrate seamlessly through OCSF, enabling unified security operations without custom integration work
• Upwind available with pay-as-you-go pricing, single AWS bill, and no long-term commitment required
• Multi-million dollar deals already closed through Security Hub Extended with Upwind replacing incumbent CNAPP solutions
• Future roadmap includes AI workload protection, Windows Server VM coverage, and deeper Security Hub correlation engine integration

Security Hub Extended prioritizes customer choice and simplified adoption by integrating best-of-breed solutions through a unified AWS relationship and billing model.