AWS

Security Findings

Consolidated Security Hub findings from Inspector, GuardDuty, Macie, IAM Access Analyzer and Config, prioritised by severity and filterable by source product.

Tier Builder

Category Security & Identity

Refresh every 10 min

Scope regional

Live preview — demo data

Same idea on another cloud

Azure Security Recommendations GCP Security Recommendations

What this pane shows

The consolidated finding feed Security Hub aggregates from its integrated products — Amazon Inspector (CVEs and network reachability), GuardDuty (threat detections), Macie (sensitive-data findings), IAM Access Analyzer (external access) and Config — normalised into one severity-prioritised list. Each finding shows its source product, affected resource, type, age and workflow state, with the full description and remediation in the drawer.

This is the counterpart to Security Compliance (Security Hub CSPM): that pane scores control pass/fail against standards like AWS Foundational Security Best Practices; this one is the actual product findings. Control findings are deliberately excluded here so the two never double-count.

Key use cases

Daily triage of new high-severity findings across every security product at once.
Filter to a single source (e.g. just Inspector CVEs, or just GuardDuty threats).
Spot the highest-severity issues on an account without opening six consoles.
Switch region to match the Security Hub view you're investigating.

How to embed

lp.js is the single-entry loader: it injects the shared LightPane runtime (and sd-embed.css) once per page. Add this pane's own stylesheet and script; the pane mounts itself wherever the matching <div> is in the DOM.

<!-- In <head> — this pane's stylesheet -->
<link rel="stylesheet" href="https://lightpane.io/_pane-tests/aws/security-findings/security-findings.css">

<!-- Your access key (inline, or set window.lpEmbed.accessKey from your own JS) -->
<script>window.lpEmbed = { accessKey: "<your-access-key>" };</script>

<!-- Where the pane should appear -->
<div class="lp-security-findings-panel" data-lp-account="<your-account-alias>"></div>

<!-- Before </body> — shared loader + this pane's script -->
<script src="https://lightpane.io/embed/lp.js"></script>
<script src="https://lightpane.io/_pane-tests/aws/security-findings/security-findings.js" defer></script>

Tier

Available on Builder and above.

Build notes

Live-wired to security_hub_product_findings (Security Hub GetFindings with ProductName != "Security Hub"), region-scoped with a region selector. The Azure and GCP analogues are Security Findings on Microsoft Defender for Cloud and Security Command Center respectively.