What Are the Differences Between SecMaster and HSS?

Service Positioning

SecMaster is a next-generation cloud native security operations platform. It enables integrated and automatic security operations through cloud asset management, security posture management, security information and incident management, security orchestration and automatic response, cloud security overview, simplified cloud security configuration, configurable defense policies, and intelligent and fast threat detection and response.
Host Security Service (HSS) is designed to protect server workloads in hybrid clouds and multi-cloud data centers. It protects servers and containers and prevents web pages from malicious modifications.

In short, SecMaster presents the comprehensive view of security posture, and HSS secures servers and containers.

Function Differences

SecMaster collects security data (including detection data of security services such as HSS, WAF, and Anti-DDoS) on the entire network and provides capabilities such as cloud asset management, security posture management, security information and incident management, security orchestration, and automatic response, helping you implement integrated and automatic security operations management.
HSS uses technologies such as AI, machine learning, and deep algorithms to analyze server risks through agents installed on protected servers. It delivers inspection and protection tasks through the console. You can manage the security information reported by the Agent through the HSS console.

**Table 1** Differences between SecMaster and HSS
Item		Common Function	Difference
Asset security	Server	Both can display the overall security posture of servers.	SecMaster synchronizes server risk data from HSS and then displays overall server security posture. HSS scans accounts, ports, processes, web directories, software information, and automatic startup tasks on servers and displays server security posture.
Asset security	Websites	-	SecMaster checks and scans the overall security posture of website assets from different dimensions. HSS does not support this function.
Vulnerability	Server vulnerabilities	Both can display server scanning results and support server vulnerability management.	SecMaster synchronizes server vulnerability data from HSS and allows you to manage server vulnerabilities in SecMaster. HSS allows you to manage Linux, Windows, Web-CMS, and application vulnerabilities. It also gives you an overview of vulnerabilities in real time, including vulnerability scan details, vulnerability statistics, vulnerability types and distributions, your top 5 vulnerabilities, and the top 5 risky servers.
Baseline inspection	Cloud service baseline	-	SecMaster can help you check key configurations of cloud services you enabled based on built-in checks. HSS does not support this function.
Baseline inspection	Unsafe settings	-	SecMaster does not support this function. HSS checks your baseline settings, including checking for weak passwords, and reviewing security policies and configuration details. HSS provides an overview of your configuration security rating, the top 5 configuration risks, detected weak passwords, and the top 5 servers with weak passwords configured.