G2

Atharva P.

Cloud BI Engineer

Enterprise (> 1000 emp.)

6/8/2026

"Fast, Agentless Threat Detection with Amazon GuardDuty"

4.5/5

What do you like best about Amazon GuardDuty?

What I like most about Amazon GuardDuty is that it continuously monitors AWS environments and automatically flags suspicious activity without requiring extensive security infrastructure. It reviews AWS logs, network traffic, DNS activity, and account behavior to spot potential threats in near real time.

It’s also straightforward to turn on, and it begins providing useful security insights quickly, without the need for agents or complicated deployments. Review collected by and hosted on G2.com.

What do you dislike about Amazon GuardDuty?

While GuardDuty delivers valuable findings, interpreting the alerts and deciding what to prioritize can sometimes require security expertise. In larger environments, teams may also need additional processes in place to handle alert triage and remediation effectively. Review collected by and hosted on G2.com.

What problems is Amazon GuardDuty solving and how is that benefiting you?

Amazon GuardDuty helps address cloud threat detection and security monitoring challenges.

We use GuardDuty to monitor our AWS accounts for unusual login activity, privilege escalation attempts, suspicious API calls, and anomalous network behavior. For instance, if an IAM user suddenly starts accessing resources from an unexpected location, or if a compromised EC2 instance attempts to communicate with known malicious IP addresses, GuardDuty automatically generates findings.

As a result, our security team can identify and respond to potential threats much faster than with manual monitoring. Review collected by and hosted on G2.com.