AWS Security Hub integration
Prioritize Security Hub aggregated findings using centralized exploitability analysis.
Integration details
Primary category
Cloud Security
Sync direction
AWS Security Hub ↔ Konvu
Findings are ingested from AWS Security Hub into Konvu. Based on your workflow, Konvu can then push context, status changes, and severity updates back to AWS Security Hub.
Status
Coming soon
What is AWS Security Hub?
AWS Security Hub aggregates and normalizes security findings from AWS services like GuardDuty, Inspector, Macie, and Config, plus third-party tools, into a unified view with compliance frameworks.
Why connect AWS Security Hub to Konvu
- Add exploitability context to Security Hub's consolidated findings across GuardDuty, Inspector, and partner integrations.
- Reduce finding overload by triaging vulnerabilities based on exploitability in your environment rather than just CVSS or AWS severity.
- Push triage decisions back to Security Hub to maintain consistent risk posture across AWS accounts.
How it works
Scan
AWS Security Hub produces findings from scans or assessments.
Ingest & enrich
Konvu ingests those findings and enriches them with code, configuration, and deployment context.
Assess exploitability
Konvu determines exploitability and recommended action with evidence attached.
Sync decisions
Based on your workflow, Konvu can push context, status updates, and severity adjustments back into AWS Security Hub.
Quick setup
When AWS Security Hub is available, you’ll configure it from the integrations list in Konvu.
- 1Go to /configuration/integrations in Konvu and choose AWS Security Hub.
- 2Authorize access and confirm the data sources you want to sync.
- 3Save the configuration to start syncing.
Sync direction
AWS Security Hub ↔ Konvu
Findings are ingested from AWS Security Hub into Konvu. Based on your workflow, Konvu can then push context, status changes, and severity updates back to AWS Security Hub.
Join the waitlist
We’ll let you know when the AWS Security Hub integration is ready. Leave your email to get updates.
More integrations
View all
Wiz
Prioritize Wiz's cloud risks using exploit data and attack path context.
AWS Inspector
Focus Inspector scans on exploitable CVEs in EC2, Lambda, and container images.
Check Point CloudGuard
Filter CloudGuard posture findings to focus on exploitable security gaps.
Datadog Cloud Security
Prioritize Datadog CSM findings with environment-specific exploitability analysis.
Google Cloud Security Command Center
Triage SCC findings with exploit data across GCP assets and vulnerabilities.
Lacework
Focus Lacework anomaly alerts on hosts with exploitable vulnerabilities.