Protect your AWS accounts, workloads, and data with intelligent threat detection

Benefits of Amazon GuardDuty

Continuous monitoring

Keep your accounts, workloads, and data secure by continuously monitoring for potential threats across your AWS environment.

AI/ML-powered threat detection

Rapidly detect threats using anomaly detection, AI, ML, threat intelligence, and behavioral modeling.

Respond faster to threats

Quickly identify, correlate, and respond to threats with automated analysis and tailored remediation recommendations to help minimize business disruption.

Scalable, fully managed threat detection

Scale threat detection across all accounts in your AWS environment with automated analysis that helps streamline your threat detection and reduces manual effort.

End-to-end visibility into AWS compute workloads

Safeguard your accounts, data, and resources across various AWS compute types, spanning Amazon Elastic Compute Cloud (Amazon EC2), serverless workloads, and container workloads—including those on AWS Fargate.

What is GuardDuty?

Amazon GuardDuty uses AI and ML with integrated threat intelligence from AWS and leading third parties to help protect your AWS accounts, workloads, and data from threats.

How it works

Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation.