AWS IoT Device Defender review
A focused AWS IoT security audit service, with Detect unavailable to new customers.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
AWS IoT Device Defender is a managed cloud service for auditing the security configuration of IoT device fleets connected through AWS IoT. Its Audit feature checks for risks such as overly permissive policies, shared or expiring certificates, and configuration gaps. It suits organizations already managing devices with AWS IoT Core that want fleet security checks and related response actions. It is less suited to teams seeking a platform-independent IoT security service or new access to continuous device behavior monitoring.
Audit is the capability that remains available to new customers. Detect includes behavior monitoring with user-defined rules and machine-learning anomaly detection, but AWS states that Detect has been unavailable to new customers since August 31, 2026. This changes the product’s scope: buyers can use it for security audits, while new customers should not plan around Detect’s monitoring or anomaly alerts. According to the vendor’s pricing notes, pricing is usage-based, with rates listed by device principals and metric datapoints; the published pricing model therefore ties cost to usage rather than a free plan.
For AWS-centered fleets, integrations with AWS IoT Core, AWS IoT Greengrass, and AWS IoT Device Management keep the service within that ecosystem. Alerts can go to the AWS IoT console, CloudWatch, and SNS, and built-in mitigation actions include device quarantine, certificate updates, and policy replacement. Device context and historical information support investigation. Documentation is the listed support channel, so teams that require other support routes or broad non-AWS coverage should consider alternatives. Choose Device Defender when AWS IoT audits and connected mitigation are the priority; look elsewhere if newly available behavior monitoring is essential.
AWS IoT Device Defender pros and cons
- Where it wins
- Audits IoT resources for risky policies, certificate issues, and configuration gaps
- Built-in mitigation includes device quarantine and certificate or policy updates
- Connects with AWS IoT services, CloudWatch, and SNS
- Where it doesn't
- Detect monitoring and anomaly detection are unavailable to new customers
- Usage-based pricing can vary with device principals and metric datapoints
- Designed for devices connected through AWS IoT, not a general-purpose IoT platform
AWS IoT Device Defender fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update