--- title: Amazon GuardDuty Reviews meta_title: 'Amazon GuardDuty Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 57 reviews by the users' company size, role or industry to find out how Amazon GuardDuty works for a business like yours. aggregate_rating: rating_value: 4.1 review_count: 57 scale: '5' date_modified: '2026-07-12' parent_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Amazon GuardDuty Reviews **Vendor:** Amazon Web Services (AWS) **Category:** [Cloud Security Monitoring and Analytics Software](https://www.g2.com/categories/cloud-security-monitoring-and-analytics) **Average Rating:** 4.1/5.0 **Total Reviews:** 57 ## About Amazon GuardDuty Amazon GuardDuty is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads.GuardDuty also detects potentially compromised instances or reconnaissance by attackers. ## Amazon GuardDuty Reviews ### 1. Fast, Agentless Threat Detection with Amazon GuardDuty **Rating:** 4.5/5.0 stars **Reviewed by:** Atharva P. | Cloud BI Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** June 08, 2026 **What do you like best about Amazon GuardDuty?** What I like most about Amazon GuardDuty is that it continuously monitors AWS environments and automatically flags suspicious activity without requiring extensive security infrastructure. It reviews AWS logs, network traffic, DNS activity, and account behavior to spot potential threats in near real time. It’s also straightforward to turn on, and it begins providing useful security insights quickly, without the need for agents or complicated deployments. **What do you dislike about Amazon GuardDuty?** While GuardDuty delivers valuable findings, interpreting the alerts and deciding what to prioritize can sometimes require security expertise. In larger environments, teams may also need additional processes in place to handle alert triage and remediation effectively. **What problems is Amazon GuardDuty solving and how is that benefiting you?** Amazon GuardDuty helps address cloud threat detection and security monitoring challenges. We use GuardDuty to monitor our AWS accounts for unusual login activity, privilege escalation attempts, suspicious API calls, and anomalous network behavior. For instance, if an IAM user suddenly starts accessing resources from an unexpected location, or if a compromised EC2 instance attempts to communicate with known malicious IP addresses, GuardDuty automatically generates findings. As a result, our security team can identify and respond to potential threats much faster than with manual monitoring. ### 2. Very useful solution, but not complete **Rating:** 4.0/5.0 stars **Reviewed by:** Cedric T. | Vice president, Enterprise (> 1000 emp.) **Reviewed Date:** June 17, 2022 **What do you like best about Amazon GuardDuty?** The facility to deploy the solution and enable it for all new accounts automatically is great. The coverage of Kubernetes workload is also a great addition pretty recent. **What do you dislike about Amazon GuardDuty?** GuarDuty is a solution which is mostly rule based. So it can't detect new threat if it's not violating known pattern. Moreover, Guarduty is not an active protection solution but a detection solution. Useful but has to be coupled with automatism to block or react. **Recommendations to others considering Amazon GuardDuty:** It's a no brainer, you should activate it in your AWS accounts as a first piece of protection. If you're looking for more complete protection then you check the CWPP solutions with more behavior detection included. **What problems is Amazon GuardDuty solving and how is that benefiting you?** Intrusion detection. Very useful solution to detect threats. ### 3. GuardDuty is a good first attempt at a reactive IDS. We use it for our various accounts **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** January 06, 2022 **What do you like best about Amazon GuardDuty?** I like that it's very simple to enable and has a relatively low cost compared to other AWS services. It categorizes several things by TTP and integrates with our SIEM and Slack **What do you dislike about Amazon GuardDuty?** The delay. It will update the alert with "Started" and "First seen" as well as "updated" but it's not as fast as some other products. It's a low-cost of entry and should be enabled in every AWS account as a good first attempt. **What problems is Amazon GuardDuty solving and how is that benefiting you?** Intrusion detection system built into our AWS Orgmaster and a one-stop shop for all our GuardDuty alerts. I do spend time in this and also send all the alerts to our SIEM so I can better correlate the information. ### 4. Best For Anomaly Detection **Rating:** 4.0/5.0 stars **Reviewed by:** Harsh G. | Tech Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** September 10, 2021 **What do you like best about Amazon GuardDuty?** Amazon GuardDuty is an intelligent threat discovery offering that uses machine learning algorithms for anomaly detection, third-party data. Collects log data from different services like unusual API calls, IP addresses and notified in case of findings provided cloud-watch event rules setup. **What do you dislike about Amazon GuardDuty?** Initially available for 30 days trial, though no need to install any software. **What problems is Amazon GuardDuty solving and how is that benefiting you?** We use Amazon GuardDuty to get notified in case of unusual IP addresses and internal traffic. Benefits -Protect Account - Anomaly Detection -No need to install the software. ### 5. Amazon GuardDuty is the best choice to protect your company! **Rating:** 4.0/5.0 stars **Reviewed by:** Corney M. | Software Developer, Computer Software, Mid-Market (51-1000 emp.) **Reviewed Date:** July 07, 2019 **What do you like best about Amazon GuardDuty?** There are many features that I like about Amazon GuardDuty, after all I consider it the best threat detector in the market today, this detector allows a comprehensive and timely identification of a wide variety of threats, reporting everything in a very practical and simple way. This tool breaks many standards by allowing not only detect but also automate each of the responses to threats, reducing time for action before these. Features such as threat intelligence, automatic learning and own behavioral models make it the first option in security. **What do you dislike about Amazon GuardDuty?** Regarding the functionality of this threat detector, in my opinion there are not many negative things. however one detail that we often miss is the user service, although this is usually a bit slow in its management, giving delays suggest lost in our work time. **Recommendations to others considering Amazon GuardDuty:** Do not wait any more and enter the world of Amazon GuardDuty, start working in the safest way, avoiding inconveniences and malicious IP. For this reason and more I recommend this awesome product of Amazon! **What problems is Amazon GuardDuty solving and how is that benefiting you?** Amazon GuardDuty has allowed us to solve our security problems through the automation that this provides, so that by automating the responses to threats we have the ability to repair them and recover in less time thus avoiding losses in our estimated time of work. On the other hand, its integral way of reporting each threat gives us all the necessary information from the attacker from its location to its IP address, which allows us to eradicate the problem in a faster and safer way. ### 6. I love this incredible service that Amazon offers! **Rating:** 3.5/5.0 stars **Reviewed by:** John S. | Senior Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** June 24, 2019 **What do you like best about Amazon GuardDuty?** One of the most notable features of Amazon GuardDuty is that it provides an intelligent and cost-effective option for the immediate detection of threats in the AWS cloud. Amazon GuardDuty also uses machine learning, anomaly detection, and integrated threat intelligence to identify and prioritize potential threats. Since we use GuardDuty in our company, we can say that we feel really secure as it analyzes billions of events across multiple AWS data sources. **What do you dislike about Amazon GuardDuty?** The GuardDuty service is so comprehensive that I have no complaints about the functioning of this product; however, I would like it to improve every day and continue providing excellent service. **Recommendations to others considering Amazon GuardDuty:** If you need a service that keeps your company's data secure, I think your best option is to try this excellent service from Amazon. **What problems is Amazon GuardDuty solving and how is that benefiting you?** One of the biggest challenges we had in the company was being able to manage multiple accounts, but after trying this Amazon service, it was simply possible to manage them all. With this multi-account feature, you can add all the findings from member accounts to a GuardDuty administrator account. This allows the security team to manage all GuardDuty findings across the organization in a single account. ### 7. If you need to be sure, Amazon GuardDuty is your best option. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** June 23, 2019 **What do you like best about Amazon GuardDuty?** This threat detection service has been very useful in my company, what I like most about Amazon GuardDuty is that it is easy to use, its great capacity allows it to detect almost any type of activity, from cryptocurrency mining to actions that generate a weak point in our credentials. Amazon GuardDuty has not only threat intelligence but also automatic learning, which allows for constant update so that no threat can be overlooked, thus conferring security to our facilities and devices. **What do you dislike about Amazon GuardDuty?** There is not something that can really seem negative to me from this threat detector, it has been an essential part of my tools to keep my work more secure and it has always shown its good quality, being always up-to-date with the technological updates over time, lending a integral service according to my needs. **Recommendations to others considering Amazon GuardDuty:** I would recommend Amazon GuardDuty without thinking, it is an excellent tool with which any company should currently count. Use Amazon GuardDuty!! **What problems is Amazon GuardDuty solving and how is that benefiting you?** Amazon GuardDuty benefits our company daily by allowing us to enable and manage several, so we can add all the findings of each of our accounts in the company to a single Amazon GuardDuty administrator account which allows our security team manage each of the findings in a single account, thus facilitating its integration into a system of events management in the company thus maintaining control in a more global way. ### 8. Without a doubt, the best product on Amazon! **Rating:** 4.0/5.0 stars **Reviewed by:** Ralph P. | Software Application Developer at Cisco, Enterprise (> 1000 emp.) **Reviewed Date:** May 27, 2019 **What do you like best about Amazon GuardDuty?** We have been using this Amazon product for a few years to protect ourselves against threats, even to detect threats. With GuardDuty, it is also very simple and easy to automate threat responses, which reduces repair and recovery times. **What do you dislike about Amazon GuardDuty?** I have no problem using this product. Amazon GuardDuty is such a solid and functional platform that it's very difficult to find negative things about it, but, nevertheless, I would like Amazon to offer a product that is even easier to use, because for some users it is difficult to understand. **Recommendations to others considering Amazon GuardDuty:** If you want to improve your company's security, don't hesitate and try this amazing product from Amazon! Without a doubt, Amazon is number one! Moreover, Amazon GuardDuty is a relatively economical product compared to others! **What problems is Amazon GuardDuty solving and how is that benefiting you?** The multiple benefits we have obtained from Amazon GuardDuty to keep our data protected, GuardDuty offers tools that provide automatic security responses to security findings. ### 9. One of the best software to use! **Rating:** 4.5/5.0 stars **Reviewed by:** Clifford P. | Animator, Computer Software, Enterprise (> 1000 emp.) **Reviewed Date:** May 28, 2019 **What do you like best about Amazon GuardDuty?** Amazon GuardDuty has an extraordinary security system and one of the features that has fascinated me is that GuardDuty is the central administration at the enterprise level, which has given us the ability to enable and manage several accounts at once, with this feature, it is It is possible to add all findings from member accounts to a GuardDuty administrator account, this makes it possible for the security team to manage all of those GuardDuty findings in a single account. **What do you dislike about Amazon GuardDuty?** When we started using Amazon GuardDuty we had doubts about its security system, but after testing it, we realized that it is a service with an excellent security system that will always protect us from possible threats. **Recommendations to others considering Amazon GuardDuty:** GuardDuty has proven to be a high performance software, my only recommendation for those who want to try it is simply to do it! **What problems is Amazon GuardDuty solving and how is that benefiting you?** Benefits and solved problems that we have obtained with the Amazon GuardDuty implementation, since it collects and delivers the security findings to the Administration Console in a JSON format, which allows an administrator or an automated workflow to act. In addition, the GuardDuty console and APIs maintain security findings for approximately 90 days. ### 10. I feel safe while I using this service! **Rating:** 4.0/5.0 stars **Reviewed by:** Cole P. | Software Programmer, Enterprise (> 1000 emp.) **Reviewed Date:** May 28, 2019 **What do you like best about Amazon GuardDuty?** What I like most about this service is that it has allowed us to continuously monitor our workloads in conjunction with AWS accounts, and GuardDuty is equipped with an excellent security system, which prevents possible threats and abnormalities. Amazon GuardDuty is a service that provides very specific alerts that are easy to integrate with workflow systems and management of existing events. **What do you dislike about Amazon GuardDuty?** GuardDuty is a service that meets all the characteristics for which it was designed. In my experience with GuardDuty I can say that it has not failed me! **Recommendations to others considering Amazon GuardDuty:** I simply recommend to give to Amazon GuardDuty the opportunity, as it has proven to be a reliable service. **What problems is Amazon GuardDuty solving and how is that benefiting you?** Our Amazon GuardDuty company has provided many benefits, such as the ability to continually analyze cloud events in the AWS CloudTrail flow logs, Amazon's virtual private cloud, and domain name system logs to detect possible malicious activities. With this service we have been able to Increase our annual benefits and the security of our data! ## Amazon GuardDuty Discussions - [What is Amazon GuardDuty used for?](https://www.g2.com/discussions/what-is-amazon-guardduty-used-for) - 1 comment - [View Amazon GuardDuty pricing details and edition comparison](https://www.g2.com/products/amazon-guardduty/reviews/amazon-guardduty-review-7488994?section=pricing&secure%5Bexpires_at%5D=2026-07-19+11%3A23%3A39+-0500&secure%5Bsession_id%5D=eb68d378-da0c-4387-b0f5-ee36b0ca7240&secure%5Btoken%5D=6ff2d1c9342b14e7460ed1d5a915d8fbb4204acd61b1a7d5f89a574b63f454a5&format=llm_user) ## Amazon GuardDuty Integrations - [Amazon AWS Platform](https://www.g2.com/products/amazon-aws-platform/reviews) ## Amazon GuardDuty Features **Activity Monitoring** - Usage Monitoring - Database Monitoring - API Monitoring - Activity Monitoring **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Security** - Compliance Monitoring - Risk Analysis - Reporting **Security** - Data Security - Data loss Prevention - Security Auditing **Administration** - Security Automation - Security Integration - Multicloud Visibility **Identity** - SSO - Governance - User Analytics **Agentic AI - Cloud Security Monitoring and Analytics** - Autonomous Task Execution - Proactive Assistance - Decision Making ## Top Amazon GuardDuty Alternatives - [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews) - 4.5/5.0 (126 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (282 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) - 4.4/5.0 (364 reviews)