Sold by: Vectra AI
AI-native threat detection and observability for partner-delivered security services across hybrid networks, cloud, and identity
4.3
Overview
The Vectra AI Platform enables service delivery partners to help customers secure a connected attack surface spanning network, identity, cloud, SaaS, and unmanaged devices. Built on behavioral AI and Attack Signal Intelligence, it reveals attacker behavior and prioritizes what matters so partners can investigate and respond more efficiently.
Vectra AI turns network and identity activity into trusted Attack Signal Intelligence that enables partners to Observe exposure, Signal active attacks, and Act through assisted or automated security workflows.
- Behavioral threat detection identifies credential abuse, reconnaissance, command and control, lateral movement, and other attacker behaviors across hybrid environments.
- Identity and SaaS security connects suspicious behavior across Microsoft Active Directory, Microsoft Entra ID, and Microsoft 365 with the broader attack narrative.
- Vectra AI Stream exports enriched security metadata to SIEMs and data lakes in an open, Zeek-compatible format.
- Vectra AI Recall supports historical metadata search, investigation, and threat hunting.
The Vectra AI Platform integrates with AWS network monitoring and AWS Security Hub so partners can combine Vectra detections with other security findings. Open integrations support existing customer SIEM, SOAR, EDR, and response workflows.
For questions on how Vectra AI will work within your environment, please contact: aws-marketplace@vectra.ai
Highlights
- Observe: Reveal attacker exposure through network and identity observability across on-premises, cloud, and SaaS environments
- Signal: Identify real attacker behavior through behavioral AI and correlated, prioritized Attack Signal Intelligence.
- Act: Accelerate investigation and containment through native and integrated workflows that fit existing customer security architectures.
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Vectra AI for PPC | Vectra AI Platform for Partner Provided Consulting - billed monthly | $15,000.00 |
Vectra AI M365 coverage for PPC | Vectra AI M365 for PPC - Partner Provided Consulting - billed monthly | $60.00 |
Dimension | Cost/unit |
|---|---|
Vectra AI Platform for Partner Provided Consulting - Platform Overages | $1.00 |
Dimensions summary
This listing bills on a contract basis for Service Delivery Partners who provide consulting. You pay by units across three dimensions. The Vectra AI for PPC unit covers the core platform and bills monthly. The Vectra AI M365 coverage for PPC unit adds M365 environment coverage and also bills monthly. The Platform Overages dimension charges for usage that exceeds your committed platform units. You select unit quantities to match the coverage you deliver to customers, then overages apply if usage runs past your commitment.
Top-of-mind questions for buyers
A unit maps to the amount of monitored coverage you deliver to a customer environment. The Vectra AI for PPC unit covers the core platform across network, identity, and cloud. The M365 coverage unit covers monitoring of M365 environments. You set unit quantities to match the coverage you provide.
Overages apply when your platform usage runs past the units you committed to. The Platform Overages dimension charges for that excess usage automatically, with no manual upgrade needed. Usage within your committed units bills under the standard PPC dimension instead.
All three dimensions bill independently on the same invoice. The Vectra AI for PPC unit drives the core cost and bills monthly. The M365 coverage unit adds charges only if you monitor M365 environments. Platform Overages add cost only when usage exceeds your commitment.
www.vectra.ai
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
support@vectra.ai https://www.vectra.ai/support or call us at (408) 326-2022 (US)
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Vectra AI coverage for AWS uses behavioral AI to identify attacker activity across AWS accounts and services, helping security teams prioritize cloud threats and respond with confidence
The Vectra AI Platform delivers AI-native security and observability for the modern AI enterprise. Built on Attack Signal Intelligence rooted in network and identity, it helps security teams understand their connected attack surface, identify attacker behavior across environments, and investigate and respond at AI speed. Reduce exposure, accelerate response, and strengthen cyber resilience across cloud, SaaS, identity, network, and unmanaged assets.
Vectra AI delivers AI-native security and observability for modern AI enterprises. Vectra MDR extends the Vectra AI Platform with expert-led, continuous threat monitoring and investigation, supported by Vectra AI Analyst to summarize attacker behavior and accelerate security decisions. Together, trusted Attack Signal Intelligence and managed expertise help organizations detect, investigate, and respond to threats across connected environments.
Implementation, integration and support of Vectra AI by TOM SHAW, an authorised Vectra AI partner in Australia.
Customer reviews
Manufacturing
Vectra AI: Fast, Insightful Threat Detection with Strong M365 and Azure AD Integration
Reviewed on Apr 02, 2026
Review provided by G2
What do you like best about the product?
Vectra AI was a valuable addition to our cybersecurity tools. It helps us protect our assets and the company network from modern attacks.
Our security analysts use Vectra AI to go through detections of anomalies in our environment. Easily integrated with M365 and Azure AD.
We were able to quickly identify and prevent data leakage by investigating a suspicious M365 mail forwarding detection by Vectra AI. Other M365 detections we observed included risky Exchange Operations, Phishing simulation configuration change, Suspect eDiscovery Usage, Malicious links sent by external Teams user, and many more.
Detections that helped our SOC team prevent a major cyber incident was Azure AD Admin account creation, Login attempts from a disabled account, Azure AD TOR activity, Azure AD Suspicious device registration, among others.
A great feature is the AI intelligence as well as the Vectra AI Post-Quantum Cryptography Readiness dashboard. Quantum computing threatens today's public-key cryptography, putting SSH and TLS key exchanges at risk of future decryption. This Vectra AI dashboard highlights hosts and daily SSH connections still relying on non-PQC key exchange, helping us identify exposure and prioritize migration to quantum-resistant algorithms.
The interface loads fast and offers clear visualization allowing our SOC analysts to explore our environment to uncover emerging threats.
When assistance was needed, we received fast and professional support from the vendor.
Cost may be a limitation for some, however, for us being a large company with permissive budget, it was a good investment for the value it brought.
Our security analysts use Vectra AI to go through detections of anomalies in our environment. Easily integrated with M365 and Azure AD.
We were able to quickly identify and prevent data leakage by investigating a suspicious M365 mail forwarding detection by Vectra AI. Other M365 detections we observed included risky Exchange Operations, Phishing simulation configuration change, Suspect eDiscovery Usage, Malicious links sent by external Teams user, and many more.
Detections that helped our SOC team prevent a major cyber incident was Azure AD Admin account creation, Login attempts from a disabled account, Azure AD TOR activity, Azure AD Suspicious device registration, among others.
A great feature is the AI intelligence as well as the Vectra AI Post-Quantum Cryptography Readiness dashboard. Quantum computing threatens today's public-key cryptography, putting SSH and TLS key exchanges at risk of future decryption. This Vectra AI dashboard highlights hosts and daily SSH connections still relying on non-PQC key exchange, helping us identify exposure and prioritize migration to quantum-resistant algorithms.
The interface loads fast and offers clear visualization allowing our SOC analysts to explore our environment to uncover emerging threats.
When assistance was needed, we received fast and professional support from the vendor.
Cost may be a limitation for some, however, for us being a large company with permissive budget, it was a good investment for the value it brought.
What do you dislike about the product?
Initial setup required some reading and calls to support. Cost may be a limitation for some.
What problems is the product solving and how is that benefiting you?
Vectra AI helps us protect our assets and the company network from modern attacks. It is a very powerful solution that offers large amount of data neatly presented through very intuitive and modern interface.
Higher Education
Easy to Learn, Clear, and Truly Helpfulclear use of product
Reviewed on Feb 19, 2026
Review provided by G2
What do you like best about the product?
easy to work with and clear method of learning to use
What do you dislike about the product?
i have zero problems with it and find it quite helpful
What problems is the product solving and how is that benefiting you?
it is helping us to do better threat hunting and know things before they become problems
Paul D.
Team Manager, Enterprise Information Security
Reviewed on Sep 17, 2020
Review provided by G2
What do you like best about the product?
Ease of deployment, intuitive UI, and easy to work with sales and support staff.
What do you dislike about the product?
Reporting is lacking, currently only one report available with different timelines, also no ability to export from the console.
What problems is the product solving and how is that benefiting you?
Visibility of network traffic, analysis of network traffic, and baselining.
Joel V.
Easy to deploy and works great at finding evil.
Reviewed on Sep 11, 2020
Review provided by G2
What do you like best about the product?
Vectra finds what other controls miss. It is used to help with network visibility and integrates great with Splunk. We have passed every pen test since Vectra was deployed. The company has really listened to the customers and made big improvements over the last three years.
What do you dislike about the product?
It can get expensive if you have a lot of offices. The appliances are not cheap so if you have a bunch of smaller offices it can start to add up.
What problems is the product solving and how is that benefiting you?
Network visibility in east-west traffic is our primary use. Because we ingest the data in Splunk it is also used to evaluate incidents and help make decisions on incident prioritization.
Recommendations to others considering the product:
Vectra helps IR teams with prioritizing events. It can take some time to get everything reporting correctly so use the Vectra resources to help create the rules and whitelisting events is recommended.
Information Technology and Services
Unbeaten speed of innovation
Reviewed on Aug 27, 2020
Review provided by G2
What do you like best about the product?
Vectra does what it says on the tin, but goes beyond in providing a constant speed of innovation that means they are constantly releasing new features and detections, helping us to keep up to speed with any threats on our network.
What do you dislike about the product?
As with any security tool, the alerts! But thankfully by monitoring the quadrant-based approach serious issues boil up for quick investigation.
What problems is the product solving and how is that benefiting you?
East-west visibility and identification of dark/unknown IT