Security Center Basic provides free security protection to all Alibaba Cloud users, including unusual logon detection, DDoS trojan detection, and vulnerability detection. Install the Security Center agent on your servers to use these services for free.
Intended users
Enterprise and individual users who need centralized security management for their servers.
Features
Security Center Basic protects Alibaba Cloud ECS instances and non-Alibaba Cloud servers, including on-premises servers. It provides the following capabilities:
Security Center Basic only detects risks and generates alerts. It does not remediate them.
|
Feature |
Description |
References |
|
Vulnerability detection |
Detects Linux software, Windows system, and Web-CMS vulnerabilities. Automatic scans run every other day. View results on the Vulnerabilities page. |
|
|
Urgent vulnerability |
Detects recently disclosed high-risk vulnerabilities on your servers to reduce the risk of intrusion. Note
To detect urgent vulnerabilities, you must manually run a scan from the Vulnerabilities page. |
|
|
Unusual logon |
Provides basic detection of unusual logons and brute-force attacks to help identify suspicious login activity early. |
Overview of Cloud Workload Protection Platform (CWPP) security alerts |
|
Cloud threat detection |
Detects anomalous cloud product usage through user behavior analysis. For example, identifies when a compromised AccessKey is used to purchase ECS instances for crypto-mining. |
|
|
AccessKey pair leak |
Scans public code repositories such as GitHub in real time for exposed credentials. Generates an alert when your AccessKey pair is leaked. |
|
|
Compliance check |
Checks compliance against standards such as MLPS 2.0 and ISO 27001 to help meet assessment requirements and achieve certifications. |
Get Security Center Basic
Security Center Basic is enabled for all Alibaba Cloud users by default. Verify your edition on the Overview page of the Security Center console.
Enable server protection
After you install the Security Center agent on a server, Security Center begins protecting it.
Install the agent in one of the following ways:
-
Alibaba Cloud ECS instance
-
When you purchase an ECS instance, select Security Hardening. This automatically installs the agent on the ECS instance.
-
Manually install the agent in the Security Center console. Install the agent.
-
-
Servers hosted outside of Alibaba Cloud
Manually install the agent from the Security Center console. Install the agent.
Apply for a 7-day free trial
If you have an Alibaba Cloud ECS instance and need more advanced security features, apply for a 7-day free trial. Start a 7-day free trial.