Help Center/ SecMaster/ Service Overview/ Edition Differences
Updated on 2025-08-12 GMT+08:00

Edition Differences

SecMaster provides basic, standard, and professional editions.

Table 1 Edition description

Edition

Billing Mode

Edition Description

Basic

  • Yearly/Monthly
  • You can experience basic functions of SecMaster. This edition provides a security overview, and aggregated raw alerts. You will learn the basic situation awareness of your cloud environment.

For details about the functions supported by each edition, see Service Editions and Supported Functions. For details about the functions, see Functions.

Standard

  • Yearly/Monthly

This edition provides situation awareness details, aggregated raw alerts, and intelligent analysis. It will help you meet security and compliance requirements, such as log audits.

  • This edition provides baseline inspection, log audit, and other features to help you assess environment compliance with security requirements.
  • This edition can retain security data aggregated into SecMaster up to 180 days. This complies with data retention requirements stated in DJCP.

For details about the functions supported by each edition, see Service Editions and Supported Functions. For details about the functions, see Functions.

Professional

  • Pay-per-use
  • Yearly/Monthly
  • Changing the billing mode from pay-per-use to yearly/monthly

This edition provides situation awareness details, professional operations reports, preconfigured security models and playbooks, precise threat detection models, intelligent analysis, security orchestration, and full log audits. It helps you meet requirements for routine security operations and compliance checks.

  • This edition supports centralized management of resources on and off the cloud, as well as cross-account and cross-region security operations.
  • SecMaster provides threat management and security orchestration. Built on SecMaster foundation, the threat operations module aggregates, associates, and analyzes alerts and logs aggregated from HSS, CFW, and WAF, for comprehensive threat detection. Besides that, SecMaster integrates with other security products to enable centralized, one-click, and automated threat responses that significantly improve threat response efficiency.

For details about the functions supported by each edition, see Service Editions and Supported Functions. For details about the functions, see Functions.

Service Editions and Supported Functions

Table 2 Service editions and supported functions

Level-1 Function Module

Feature

Basic Edition

Standard Edition

Professional Edition

Edition Description

This edition provides a security overview, and aggregated raw alerts. You will learn the basic security situation of your cloud environment.

This edition provides situation awareness details, aggregated raw alerts, and intelligent analysis. It will help you meet security and compliance requirements, such as log audits.

This edition provides situation awareness details, professional operations reports, preconfigured security models and playbooks, precise threat detection models, intelligent analysis, security orchestration, and full log audits. It helps you meet requirements for routine security operations and compliance checks.

Situation Awareness

Security Overview

Supported

Supported

Supported

Situation Overview

Supported

Supported

Supported

Security Reports

--

--

Supported

Daily, weekly, and monthly security reports are supported.

Custom security reports are supported.

Resource Manager

Supported

Supported

Supported

Purchased Resources

Supported

Supported

Supported

Security Policies

Supported

Supported

Supported

Baseline Inspection

Supported

Supported

Supported

Vulnerabilities

Supported

Supported

Supported

Large Screen

--

Supported

Supported

Situation Awareness

AI Risk Overview

Supported

Supported

Supported

Risk Prevention

Emergency Vulnerability Notices

Supported

Supported

Supported

Threats

Incidents

--

Supported

Supported

Alerts

Supported

This edition supports aggregating raw alerts from other security services.

The following log types are supported:

  • HSS security baseline: hss-baseline
  • SecMaster baseline: secmaster-baseline

Supported

This edition supports aggregating raw alerts from other security services.

The following log types are supported:

  • HSS security baseline: hss-baseline
  • SecMaster baseline: secmaster-baseline
  • MTD alarm log: mtd-alarm
  • HSS security alarm: hss-alarm
  • HSS vulnerability scan results: hss-vul
NOTE:

Only regions that support Managed Threat Detection (MTD) can access MTD alarm logs (mtd-alarm). For details about regions that support MTD, see Cloud Service Log Access Supported by SecMaster.

Supported

This edition supports aggregating raw alerts from other security services.

This edition enables high-fidelity alerts from threat detection models.

This edition supports mapping to MITRE matrixes.

The following log types are supported:

  • HSS security baseline: hss-baseline
  • SecMaster baseline: secmaster-baseline
  • MTD alarm log: mtd-alarm
  • HSS security alarm: hss-alarm
  • HSS vulnerability scan results: hss-vul
NOTE:

Only regions that support Managed Threat Detection (MTD) can access MTD alarm logs (mtd-alarm). For details about regions that support MTD, see Cloud Service Log Access Supported by SecMaster.

Indicators

--

--

Supported

Intelligent Modeling

--

--

Supported

Calculate model: 120 MB/day/quota

Preset models: 200

Preset playbooks: 30

Security Data

--

Supported

Free quota of security data collection: 120 MB/day/quota

Free quota of security data retention: 120 MB/day/quota

Free quota of security data export: 120 MB/day/quota

Free quota of platform security data export: 40 MB/day/quota

Supported

Free quota of security data collection: 120 MB/day/quota

Free quota of security data retention: 120 MB/day/quota

Free quota of security data export: 120 MB/day/quota

Free quota of platform security data export: 40 MB/day/quota

Free quota of security modeling analysis: 120 MB/day/quota

Security Orchestration

Objects

--

--

Supported

Security Orchestration

--

--

Supported

Free quota: 7000 operations

Layouts

--

--

Supported

Plugins

--

--

Supported

Security Orchestration

Directory Customization

--

Supported

Supported

Data Collection

Data Collection

--

Supported

Supported

Data Integration

Data Integration

--

Supported

Only cloud service alerts can be integrated.

Supported

Log Audit Overview

Log Audit Overview

Supported

Supported

Supported

Multi-Account Management

Multi-Account Management

--

--

Supported