Anyone who runs multiple detection tools at once hits the real problem fast. GuardDuty outputs in GuardDuty format, Inspector in its format, Macie in another. Three tools emitting different-shaped alerts about the same S3 bucket make operators unsure if they're looking at the same problem or three separate ones. "Take multiple security signals, unify them in one language, deduplicate, prioritize, layer auto-remediation on top." That's the problem Security Hub solves—and it's a cloud-native reinvention of decades-old SIEM (Security Information and Event Management)