OpenAna + AWS Security Hub

Aggregated AWS security findings.

Report importSecurity testing

Ana + AWS Security Hub

What Ana does with it.

Findings Ana pulls live or imports, de-duplicates, ranks by real exposure and turns into fixes.

01
Imports Security Hub findings across accounts
02
Traces each to IaC
03
Fixes in code with control mapping

Setup

Connected in four steps.

1
Export or schedule
Export results from AWS Security Hub in its standard report format, or schedule the export.
2
Import
Upload to Ana or drop into the connected storage; Ana parses and normalizes every finding.
3
Merge
Findings are de-duplicated with your other scanners and ranked by real exposure.
4
Fix and prove
Ana opens fixes with regression tests and keeps closure evidence per finding.

In practice

Playbooks that use AWS Security Hub.

Security

Fixing cloud misconfigurations at the source

Your CSPM tool flags public buckets, wide IAM policies and open security groups. Ana traces each one back to the infrastructure-as-code that created it, fixes it there, and stops it from coming back.

Read the playbook →

Used by

Ana’s engineers

Security →SRE / DevOps →

Governed

Every action, approved and logged.

Ana’s guardrails decide what it may do with AWS Security Hub, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.

Guardrails →Trust center →

FAQ