Edition Differences

SecMaster provides basic, standard, and professional editions.

**Table 1** Edition description
Edition	Billing Mode	Edition Description
Basic	Yearly/Monthly	You can experience basic functions of SecMaster. This edition provides a security overview, and aggregated raw alerts. You will learn the basic security situation of your cloud environment. For details about the functions supported by each edition, see Service Editions and Supported Functions. For details about the functions, see Functions.
Standard	Yearly/Monthly	This edition provides security situation details, aggregated raw alerts, and intelligent analysis. It will help you meet security and compliance requirements, such as log audits. This edition provides baseline inspection, log audit, and other features to help you assess environment compliance with security requirements. This edition can retain security data aggregated into SecMaster up to 180 days. This complies with data retention requirements stated in DJCP. For details about the functions supported by each edition, see Service Editions and Supported Functions. For details about the functions, see Functions.
Professional	Pay-per-use Yearly/Monthly	This edition provides security situation details, professional operations reports, preconfigured security models and playbooks, precise threat detection models, intelligent analysis, security orchestration, and full log audits. It helps you meet requirements for routine security operations and compliance checks. This edition supports centralized management of resources on and off the cloud, as well as cross-account and cross-region security operations. SecMaster provides threat management and security orchestration. Built on SecMaster foundation, the threat operations module aggregates, associates, and analyzes alerts and logs aggregated from HSS, CFW, and WAF, for comprehensive threat detection. Besides that, SecMaster integrates with other security products to enable centralized, one-click, and automated threat responses that significantly improve threat response efficiency. For details about the functions supported by each edition, see Service Editions and Supported Functions. For details about the functions, see Functions.

Service Editions and Supported Functions

**Table 2** Service editions and supported functions
Level-1 Function Module	Feature	Basic Edition	Standard Edition	Professional Edition
Edition Description		This edition provides a security overview, and aggregated raw alerts. You will learn the basic security situation of your cloud environment.	This edition provides security situation details, aggregated raw alerts, and intelligent analysis. It will help you meet security and compliance requirements, such as log audits.	This edition provides security situation details, professional operations reports, preconfigured security models and playbooks, precise threat detection models, intelligent analysis, security orchestration, and full log audits. It helps you meet requirements for routine security operations and compliance checks.
Situation Awareness	Security Overview	Supported	Supported	Supported
	Situation Overview	Supported	Supported	Supported
	Security Reports	--	--	Supported Daily, weekly, and monthly security reports are supported. Custom security reports are supported.
	Resource Manager	Supported	Supported	Supported
	Purchased Resources	Supported	Supported	Supported
	Security Policies	Supported	Supported	Supported
	Baseline Inspection	Supported	Supported	Supported
	Vulnerabilities	Supported	Supported	Supported
	Large Screen	--	Supported	Supported
Threat Operations	Incidents	--	Supported	Supported
	Alerts	Supported This edition supports aggregating raw alerts from other security services. The following log types are supported: SecMaster baseline: secmaster-baseline	Supported This edition supports aggregating raw alerts from other security services. The following log types are supported: SecMaster baseline: secmaster-baseline HSS security alarm: hss-alarm HSS vulnerability scan results: hss-vul	Supported This edition supports aggregating raw alerts from other security services. This edition enables high-fidelity alerts from threat detection models. This edition supports mapping to MITRE matrixes. The following log types are supported: SecMaster baseline: secmaster-baseline HSS security alarm: hss-alarm HSS vulnerability scan results: hss-vul
	Indicators	--	--	Supported
	Intelligent Modeling	--	--	Supported Calculate model: 120 MB/day/quota Preset models: 200 Preset playbooks: 30
	Security Analysis	--	Supported Free quota of security data collection: 120 MB/day/quota Free quota of security data retention: 120 MB/day/quota Free quota of security data export: 120 MB/day/quota Free quota of platform security data export: 40 MB/day/quota	Supported Free quota of security data collection: 120 MB/day/quota Free quota of security data retention: 120 MB/day/quota Free quota of security data export: 120 MB/day/quota Free quota of platform security data export: 40 MB/day/quota Free quota of security modeling analysis: 120 MB/day/quota
Security Orchestration	Objects	--	--	Supported
	Security Orchestration	--	--	Supported Free quota: 7000 operations
	Layouts	--	--	Supported
	Plugins	--	--	Supported
Data Collection	Data Collection	--	Supported	Supported
Data Integration	Data Integration	--	Supported Only cloud service alerts can be integrated.	Supported