The useful question is what changes for users, developers or buyers, and whether the announcement stays industry context or becomes something people can actually use.

AWS Security Hub Extended has introduced Supply Chain Security as its 10th category, integrating curated partners Chainguard and Socket to address risks in open-source libraries. The addition enables security teams to identify and block malicious dependencies prior to application build phases. The feature operates under the same pay-as-you-go pricing model as other Extended categories, with no long-term commitments required. All 23 curated partner solutions are billed through a single AWS invoice, streamlining procurement and deployment processes.

Security Hub Extended consolidates endpoint, identity, email, network, data, browser, cloud, AI, security operations, and now supply chain security into a unified platform. Findings from all partner solutions are standardized using the Open Cybersecurity Schema Framework (OCSF) and automatically aggregated within AWS Security Hub. This integration allows organizations to correlate risks across multiple security domains without manual intervention. The approach aims to simplify enterprise security management while maintaining compatibility with existing AWS Security Hub workflows.

The two new curated partner solutions, Chainguard and Socket, are available immediately in all AWS commercial Regions where Security Hub operates. Organizations can activate these solutions through the AWS Security Hub console or product page without additional setup requirements. AWS emphasizes that the Extended plan will continue expanding based on customer feedback, ensuring alignment with evolving security needs. Pricing details are accessible via the AWS Security Hub pricing page, with no upfront costs or mandatory commitments.

AWS Security Hub Extended now supports Supply Chain Security alongside nine other categories, providing a consolidated view of enterprise security risks. The inclusion of Chainguard and Socket enhances the platform’s ability to detect vulnerabilities in third-party dependencies early in the development lifecycle. All findings are normalized to OCSF and centrally managed within Security Hub, reducing operational overhead. Customers can evaluate the new category and partners through existing AWS channels, with full regional availability and transparent pricing structures.