Threat detection, posture & security operations · AWS vs Google Cloud
Amazon Detective vs Google Security Operations
Amazon Detective maps partly to Google Security Operations, a SIEM and SOAR platform for detection, investigation, and response.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | Amazon Detective | Google Security Operations |
| Lifecycle | Generally available | Generally available |
| What it is | Automatically collects log data into a behavior graph and links activity to GuardDuty findings, so you can investigate and group related security findings. | SIEM, SOAR, and threat intelligence platform with a Unified Data Model. |
| Pricing model | Per GB of data ingested into the behavior graph (with a 30-day free trial). | Contact sales; Google SecOps is sold by package. |
| Docs | Amazon Detective docs | Google Security Operations docs |
| Pricing page | Amazon Detective pricing | — |
Key differences
- Google SecOps is a full SIEM, broader than Detective's graph-based investigation.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per GB of data ingested into the behavior graph (with a 30-day free trial). Amazon Detective pricing →
- GCP
- Contact sales; Google SecOps is sold by package.
And on Azure?
Partial match Azure's equivalent is Microsoft Sentinel. AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of Amazon Detective?
Amazon Detective maps partly to Google Security Operations, a SIEM and SOAR platform for detection, investigation, and response.
How does pricing compare between Amazon Detective and Google Security Operations?
AWS: Per GB of data ingested into the behavior graph (with a 30-day free trial). Google Cloud: Contact sales; Google SecOps is sold by package. Check the official pricing pages for current rates.
What is the Azure equivalent?
Microsoft Sentinel (partial match). Amazon Detective maps most closely to Microsoft Sentinel's incident investigation, entity pages, and UEBA, now in the Microsoft Defender portal.