Subscription

Security Hero RMF memberships are managed through AWS Marketplace. Compare plans optimized for your organization's size and security requirements, and manage your subscription status transparently within your AWS account.

1. Managing Your Subscription on AWS Marketplace

All plan changes and billing management for Security Hero RMF are handled through AWS Marketplace.

1. Go to AWS Marketplace, search for 'Security Hero RMF', and navigate to the subscription management page.
2. On the subscription modification page, you can switch to a different plan.

---

2. Plan Details & Comparison

Security Hero RMF offers plans for a range of environments. Review the new plans below. The legacy plans are closed to new subscriptions, but customers who are already subscribed can continue to use them.

New plans

The new pricing is billed per project. There are two kinds of projects.

• Standard: a project made up of one AWS account and one region.
• Organization: a project made up of one AWS Organization (a management account plus N member accounts). Organization plans come in three sizes — Organization 10 / 50 / 200 — based on the number of accounts connected, including the management account. See Organization for the organization-only features: member account discovery, bulk connections and StackSet deployment.

Item	Free	Standard	Organization 10	Organization 50	Organization 200	Enterprise
Price (monthly)	$0	$149	$599	$1,999	$5,999	Custom
Price (annual, 2 months free)	—	$1,490	$5,990	$19,990	$59,990	Custom
AWS accounts included	1	1	≤10 incl. management	≤50	≤200	Negotiated
Regions	1	1 (an additional region requires an additional project)	Up to 3 per account	Same	Same	Negotiated
Projects	1	Quantity purchased	Quantity purchased	Same	Same	Negotiated
Assessment (scan) allowance	3 total	3 per day, per connected AWS environment (account · region)	Same	Same	Same	Negotiated
Managed asset scope	EC2, S3, VPC, IAM	All services	All	All	All	All
Topology asset editing	❌	✅	✅	✅	✅	✅
Exposure path analysis	❌	✅	✅	✅	✅	✅
Detailed vulnerability reports	❌	✅	✅	✅	✅	✅
MITRE ATT&CK / NIST 800-53	❌	✅	✅	✅	✅	✅
IAM privilege escalation analysis	❌	✅	✅	✅	✅	✅
Remediation command generation (LLM)	❌	✅	✅	✅	✅	✅
Customer S3 + KMS storage	❌	✅	✅	✅	✅	✅
Report export (PDF)	❌	✅	✅	✅	✅	✅
Audit trail	❌	✅	✅	✅	✅	✅
Auditor invitations (read-only, time-boxed access)	❌	✅	✅	✅	✅	✅
Control reports (per-framework automated checks, manual evidence, mapping review, document profiles)	❌	✅	✅	✅	✅	✅
Access reviews (decisions, sign-off, history comparison)	❌	✅	✅	✅	✅	✅
Signed evidence packages (generate, download, verify)	❌	✅	✅	✅	✅	✅
Data location report	❌	✅	✅	✅	✅	✅
Risk criteria configuration (EPSS bands, thresholds, unused-credential days)	❌	✅	✅	✅	✅	✅
Formula/basis/trend lookup, control framework catalog lookup	✅	✅	✅	✅	✅	✅
Organization discovery, bulk member account connection, deployment package	—	—	✅	✅	✅	✅
Organization policy (SCP/RCP) lookup	—	—	✅	✅	✅	✅
Organization-wide dashboard, reports, bulk execution	—	—	✅	✅	✅	✅
Technical support	Community	Email	Email (priority)	Dedicated manager	Dedicated manager (SLA)	Dedicated TAM (SLA)

For details on auditor invitations, control reports, access reviews, signed evidence packages, data location reports and risk criteria configuration, see the "Controls", "Risk Score Explained", "Access Reviews", "Evidence Package" and "Data Location" guide pages.

Which plan should you choose

Use the table below as a guide, based on the number of AWS accounts you have.

Account setup	Choose	Monthly
1 account	Standard × 1	$149
2 accounts (not using AWS Organizations)	Standard × 2	$298
4 accounts	Standard × 4	$596
5-10 accounts (AWS Organizations)	Organization 10	$599
30 accounts	Organization 50	$1,999
120 accounts	Organization 200	$5,999
More than 300 accounts	Enterprise	Negotiated

Once you have more than 5 accounts, an Organization plan costs less than subscribing to multiple Standard projects. If you have 1-4 accounts and are not using AWS Organizations, you can simply subscribe to one Standard project per account.

To change your quantity, follow the same steps as in section 1 above.

For an evaluation PoC (up to 3 months), please contact us about a Private Offer.

Legacy plans (closing to new subscriptions)

Customers who are already subscribed can continue to use these plans.

Basic

An entry-level plan ideal for individual developers or small teams who want to experience the RMF process.

• Price: Free
• Scan policy: 3 free scans total
• Projects: Up to 1
• Supported AWS services: EC2, S3, VPC, IAM
• Key features:
  • ✅ Cloud topology visualization (basic)
  • ✅ Baseline Risk Score calculation
  • ❌ Report export not available
• Support: Community Support

Pro Recommended

The ideal plan for SMBs, security teams, and DevOps organizations that require continuous security monitoring.

• Price: $399 / month
• Scan policy: Up to 3 scans per day
• Projects: Up to 20
• Supported AWS services: All services
• Key features:
  • Everything in Basic, plus:
  • ✅ Cloud topology asset editing
  • ✅ Detailed vulnerability analysis reports
  • ✅ Threat analysis based on the MITRE ATT&CK framework
  • ✅ NIST 800-53 security control mapping
  • ✅ Report export: PDF format
• Support: Email Support

Enterprise

A tailored plan for large enterprises and large-scale infrastructure environments that require complex compliance adherence and dedicated support.

• Price: $799 / month
• Scan policy: Unlimited scans
• Projects: Unlimited
• Supported AWS services: All services
• Key features:
  • Everything in Pro, plus:
  • ✅ Custom solutions for large-scale infrastructure
  • ✅ Dedicated Technical Account Manager (TAM)
  • ✅ SLA (Service Level Agreement)-backed technical support

Plan Feature Comparison

Feature	Basic	Pro	Enterprise
Price	Free	$399	$799
Scan Limit	Total 3	Daily 3	Unlimited
Projects	1	20	Unlimited
AWS Services	EC2, S3, VPC, IAM	All	All
Topology Map	View Only	View & Edit	View & Edit
Advanced Analysis	-	MITRE / NIST	MITRE / NIST
Report Export	-	PDF	PDF
Support	Community	Email	Dedicated SLA