Help Center/ Situation Awareness/ FAQs/ Product Consulting/ What Are the Differences Between SA and HSS?
Updated on 2023-05-09 GMT+08:00

What Are the Differences Between SA and HSS?

Service Positioning

  • Situation Awareness (SA) is a GUI-based security management platform for threat detection and analysis. SA focuses on the security threat attack posture of all your cloud assets. By aggregating detection results or events from many security products and analyzing threat data and cloud security threats, it helps you build a security system covering all your cloud assets.
  • Host Security Service (HSS) is designed to protect server workloads in hybrid clouds and multi-cloud data centers. It protects servers and containers and prevents web pages from malicious modifications.

In short, SA presents the comprehensive view of security posture, and HSS secures servers and containers.

Function Differences

  • SA aggregates network-wide security data (including alarm data from other security services such as HSS, WAF, and Anti-DDoS) and uses analysis technologies such as big data, AI, and machine learning to display asset security posture by asset, threat alarm, and baseline inspection.
  • HSS uses technologies such as AI, machine learning, and deep algorithms to analyze server risks through agents installed on protected servers. It delivers inspection and protection tasks through the console. Through the HSS console, you can manage the security information reported by the agent.
Table 1 Differences between SA and HSS functions

Function

Common Function

Difference

Asset security

Servers

Both can display the overall security posture of servers.

  • SA synchronizes server risk data from HSS and then displays overall server security posture.
  • HSS scans accounts, ports, processes, web directories, software information, and automatic startup tasks on servers and displays server security posture.

Websites

None

  • SA checks and scans the overall security posture of website assets from different dimensions.
  • HSS does not support this function.

Baseline inspection

Cloud service baseline

None

  • SA can help you check key configurations of cloud services you enabled based on built-in checks that are included in Cloud Security Compliance Check 1.0 and Network Security.
  • HSS does not support this function.

Unsafe server settings

None

  • SA does not support this function.
  • HSS checks your baseline settings, including checking for weak passwords, and reviewing security policies and configuration details. HSS provides an overview of your configuration security rating, the top 5 configuration risks, detected weak passwords, and the top 5 servers with weak passwords configured.