AWS Security Compliance Cost Calculator
Roll up GuardDuty, Security Hub, Config, Macie, and Inspector into one monthly estimate — before audit season surprises finance.
- No signup
- Instant results
- ~3 min
Rates reviewed
Read the full breakdown — Amazon GuardDuty Pricing covers billing dimensions, traps, and a 30-day cleanup plan.
Your AWS footprint
us-east-1list rates, pricing as of 2026-07-06. Uses representative volumes per service. CloudTrail logging, WAF, and KMS excluded. Source: AWS public pricing.
For security spend as % of bill.
Who This Tool Is For
SaaS CTOs, security leads, and compliance teams budgeting SOC 2, PCI, or HIPAA programs on AWS.
Why We Built This Tool
Finance sees a single security tax line — but GuardDuty, Config, Macie, and Inspector bill independently and compound across accounts.
What Problem It Solves
- Org-wide auto-enable. Every new account multiplies GuardDuty and Config charges before anyone reviews projected cost.
- Runtime Monitoring. GuardDuty Runtime on every EKS node often becomes the largest line on container-heavy bills.
- Double Inspector. Security Hub Essentials consolidates Inspector — standalone Inspector on top wastes money.
Pair with our SOC 2 checker or cloud security services.
Frequently Asked Questions
What is included in this security stack estimate?
GuardDuty, Security Hub Essentials, AWS Config, Macie, and Inspector. CloudTrail logging, WAF, KMS, and Security Lake are separate — use their dedicated calculators.
How does multi-account pricing work?
GuardDuty and Config volumes are multiplied by account count. Security Hub bills per resource unit across the org. Representative per-account volumes are scaled to your account total.
Should I enable GuardDuty Runtime Monitoring everywhere?
Only on production EKS/ECS/EC2 where runtime threat detection is a compliance requirement. Dev and CI clusters rarely justify the ~$0.008/vCPU-hour charge.
Does Security Hub replace Inspector?
Security Hub Essentials consolidates Inspector scanning into per-resource pricing. Do not enable standalone Inspector if Essentials already covers your workloads.
How do I reduce Config costs?
Use scoped recording — record only required resource types. Full recording on high-churn accounts can generate hundreds of thousands of configuration items monthly.
Where do these prices come from?
Rates match our per-service calculators sourced from AWS us-east-1 list prices, pricing as of 2026-07-06.