Alibaba Security Center

AlibabaSecurityFree tier available

Unified security operations platform covering vulnerability management, malware detection, baseline configuration scanning, log audit, container image scanning, and compliance posture across Alibaba Cloud and hybrid workloads

Jurisdictional exposure

Provider HQ
CNHangzhou, China

Subject to PIPL, DSL, CSL

Region locations
APACCNEUUKUSOther26 regions across 6 jurisdictions
Sovereign option
Yes — 11 sovereign-flagged regions available

Attributes

Agent Based
Yes

Sub-services (4)

Vulnerability Management

Agent-based OS and application CVE scanning with fix suggestions

Baseline Checks

CIS-aligned configuration auditing across ECS and container workloads

Malware Detection

Runtime threat detection on ECS instances using ML behavioural analysis

Container Scan

Image and runtime scanning for ACK and ACR resources

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

26 regions
15 countries
11sovereign
Sovereign regions (11)
  • China (Hangzhou) · HangzhouAlibaba Cloud China
  • China (Beijing) · BeijingAlibaba Cloud China
  • China (Shanghai) · ShanghaiAlibaba Cloud China
  • China (Shenzhen) · ShenzhenAlibaba Cloud China
  • China (Chengdu) · ChengduAlibaba Cloud China
  • China (Zhangjiakou) · ZhangjiakouAlibaba Cloud China
  • China (Hohhot) · HohhotAlibaba Cloud China
  • China (Qingdao) · QingdaoAlibaba Cloud China
  • China (Heyuan) · HeyuanAlibaba Cloud China
  • China (Ulanqab) · UlanqabAlibaba Cloud China
  • China (Wuhan) · WuhanAlibaba Cloud China
Commercial regions (15)

Europe (2)

  • Frankfurt
  • London

North America (2)

  • Silicon Valley
  • Virginia

Asia (9)

  • Hong Kong
  • Mumbai
  • Jakarta
  • Tokyo
  • Kuala Lumpur
  • Manila
  • Singapore
  • Seoul
  • Bangkok

Oceania (1)

  • Sydney

Middle East (1)

  • Dubai

Tags

Equivalent services on other platforms

Amazon GuardDutyAWS

Intelligent threat detection service that continuously monitors CloudTrail, VPC flow logs, and DNS logs using ML and curated threat intelligence feeds

Amazon InspectorAWS

Automated vulnerability management service that continually scans EC2, Lambda, and container images for software vulnerabilities and unintended network exposure, delivering prioritised findings with contextual risk scoring

AWS Security HubAWS

Cloud security posture management service that aggregates, prioritises, and responds to findings from GuardDuty, Inspector, Macie, IAM Access Analyzer, and 60+ third-party partners against CIS, PCI DSS, and AWS Foundational best practices

Microsoft Defender for CloudAzure

Unified cloud security posture management (CSPM) and cloud workload protection (CWPP) platform with compliance dashboards, secure score, and regulatory standards assessments

Microsoft SentinelAzure

Cloud-native SIEM and security orchestration platform (now Microsoft Sentinel) with ML-based threat detection, hunting queries, playbook automation, and 100+ data connectors

Security Command CenterGCP

Centralised security and risk management platform for GCP with asset inventory, vulnerability scanning, threat detection, compliance reporting, and security posture dashboards

IBM Cloud Security and Compliance CenterIBM

Unified CSPM and compliance posture service covering IBM Cloud and hybrid-cloud estates, with built-in scans against CIS Benchmark, FS Cloud Controls, NIST 800-53, and custom profiles, plus findings aggregation into IBM QRadar

Red Hat Advanced Cluster SecurityOpenShift

Kubernetes-native runtime threat detection, vulnerability management, and supply-chain security (formerly StackRox) covering build, deploy, and runtime phases

OCI Data SafeOracle

Unified database security management for Oracle databases on OCI, on-prem, and other clouds, covering security assessment, user risk assessment, activity auditing, data discovery and masking, and SQL firewall policies — included with Autonomous Database

Pricing

Pricing model:subscription