diff --git a/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.test.tsx b/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.test.tsx
index f0ef8f8d00da7..fb18a3a6a4459 100644
--- a/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.test.tsx
+++ b/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.test.tsx
@@ -157,4 +157,31 @@ describe('HostAlertsTable', () => {
       },
     ]);
   });
+
+  it('should render cellActions when count is bigger than zero', () => {
+    mockUseHostAlertsItemsReturn({
+      items: [parsedVulnerableHostsAlertsResult[0]],
+    });
+    const { getAllByTestId } = renderComponent();
+
+    expect(getAllByTestId('cellActions-renderContent-host.name').length).toBe(5);
+  });
+
+  it('should not render cellActions when count is zero', () => {
+    mockUseHostAlertsItemsReturn({
+      items: [
+        {
+          hostName: 'Host-342m5gl1g2',
+          totalAlerts: 100,
+          critical: 0,
+          high: 0,
+          low: 0,
+          medium: 0,
+        },
+      ],
+    });
+    const { getAllByTestId } = renderComponent();
+
+    expect(getAllByTestId('cellActions-renderContent-host.name').length).toBe(1);
+  });
 });
diff --git a/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.tsx b/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.tsx
index 5a3d2462e3e9a..8ac908bad945a 100644
--- a/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.tsx
+++ b/x-pack/plugins/security_solution/public/overview/components/detection_response/host_alerts_table/host_alerts_table.tsx
@@ -179,30 +179,33 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_CRITICAL_LABEL,
     render: (count: number, { hostName }) => (
       <EuiHealth data-test-subj="hostSeverityAlertsTable-critical" color={SEVERITY_COLOR.critical}>
-        <SecurityCellActions
-          field={{
-            name: 'host.name',
-            value: hostName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'critical' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            data-test-subj="hostSeverityAlertsTable-criticalLink"
-            disabled={count === 0}
-            onClick={() => handleClick({ hostName, severity: 'critical' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'host.name',
+              value: hostName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'critical' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink
+              data-test-subj="hostSeverityAlertsTable-criticalLink"
+              onClick={() => handleClick({ hostName, severity: 'critical' })}
+            >
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
@@ -211,29 +214,30 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_HIGH_LABEL,
     render: (count: number, { hostName }) => (
       <EuiHealth data-test-subj="hostSeverityAlertsTable-high" color={SEVERITY_COLOR.high}>
-        <SecurityCellActions
-          field={{
-            name: 'host.name',
-            value: hostName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'high' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            disabled={count === 0}
-            onClick={() => handleClick({ hostName, severity: 'high' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'host.name',
+              value: hostName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'high' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink onClick={() => handleClick({ hostName, severity: 'high' })}>
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
@@ -242,29 +246,30 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_MEDIUM_LABEL,
     render: (count: number, { hostName }) => (
       <EuiHealth data-test-subj="hostSeverityAlertsTable-medium" color={SEVERITY_COLOR.medium}>
-        <SecurityCellActions
-          field={{
-            name: 'host.name',
-            value: hostName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'medium' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            disabled={count === 0}
-            onClick={() => handleClick({ hostName, severity: 'medium' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'host.name',
+              value: hostName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'medium' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink onClick={() => handleClick({ hostName, severity: 'medium' })}>
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
@@ -273,29 +278,30 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_LOW_LABEL,
     render: (count: number, { hostName }) => (
       <EuiHealth data-test-subj="hostSeverityAlertsTable-low" color={SEVERITY_COLOR.low}>
-        <SecurityCellActions
-          field={{
-            name: 'host.name',
-            value: hostName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'low' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            disabled={count === 0}
-            onClick={() => handleClick({ hostName, severity: 'low' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'host.name',
+              value: hostName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'low' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink onClick={() => handleClick({ hostName, severity: 'low' })}>
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
diff --git a/x-pack/plugins/security_solution/public/overview/components/detection_response/user_alerts_table/user_alerts_table.tsx b/x-pack/plugins/security_solution/public/overview/components/detection_response/user_alerts_table/user_alerts_table.tsx
index 875556f12fb8d..d63e5b88e3660 100644
--- a/x-pack/plugins/security_solution/public/overview/components/detection_response/user_alerts_table/user_alerts_table.tsx
+++ b/x-pack/plugins/security_solution/public/overview/components/detection_response/user_alerts_table/user_alerts_table.tsx
@@ -176,30 +176,33 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_CRITICAL_LABEL,
     render: (count: number, { userName }) => (
       <EuiHealth data-test-subj="userSeverityAlertsTable-critical" color={SEVERITY_COLOR.critical}>
-        <SecurityCellActions
-          field={{
-            name: 'user.name',
-            value: userName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'critical' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            data-test-subj="userSeverityAlertsTable-criticalLink"
-            disabled={count === 0}
-            onClick={() => handleClick({ userName, severity: 'critical' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'user.name',
+              value: userName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'critical' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink
+              data-test-subj="userSeverityAlertsTable-criticalLink"
+              onClick={() => handleClick({ userName, severity: 'critical' })}
+            >
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
@@ -208,29 +211,30 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_HIGH_LABEL,
     render: (count: number, { userName }) => (
       <EuiHealth data-test-subj="userSeverityAlertsTable-high" color={SEVERITY_COLOR.high}>
-        <SecurityCellActions
-          field={{
-            name: 'user.name',
-            value: userName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'high' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            disabled={count === 0}
-            onClick={() => handleClick({ userName, severity: 'high' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'user.name',
+              value: userName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'high' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink onClick={() => handleClick({ userName, severity: 'high' })}>
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
@@ -239,29 +243,30 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_MEDIUM_LABEL,
     render: (count: number, { userName }) => (
       <EuiHealth data-test-subj="userSeverityAlertsTable-medium" color={SEVERITY_COLOR.medium}>
-        <SecurityCellActions
-          field={{
-            name: 'user.name',
-            value: userName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'medium' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            disabled={count === 0}
-            onClick={() => handleClick({ userName, severity: 'medium' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'user.name',
+              value: userName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'medium' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink onClick={() => handleClick({ userName, severity: 'medium' })}>
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },
@@ -270,29 +275,30 @@ const getTableColumns: GetTableColumns = (handleClick) => [
     name: i18n.STATUS_LOW_LABEL,
     render: (count: number, { userName }) => (
       <EuiHealth data-test-subj="userSeverityAlertsTable-low" color={SEVERITY_COLOR.low}>
-        <SecurityCellActions
-          field={{
-            name: 'user.name',
-            value: userName,
-            type: 'keyword',
-            aggregatable: true,
-          }}
-          mode={CellActionsMode.HOVER_RIGHT}
-          triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
-          metadata={{
-            andFilters: [
-              { field: 'kibana.alert.severity', value: 'low' },
-              { field: 'kibana.alert.workflow_status', value: 'open' },
-            ],
-          }}
-        >
-          <EuiLink
-            disabled={count === 0}
-            onClick={() => handleClick({ userName, severity: 'low' })}
+        {count > 0 ? (
+          <SecurityCellActions
+            field={{
+              name: 'user.name',
+              value: userName,
+              type: 'keyword',
+              aggregatable: true,
+            }}
+            mode={CellActionsMode.HOVER_RIGHT}
+            triggerId={SecurityCellActionsTrigger.ALERTS_COUNT}
+            metadata={{
+              andFilters: [
+                { field: 'kibana.alert.severity', value: 'low' },
+                { field: 'kibana.alert.workflow_status', value: 'open' },
+              ],
+            }}
           >
-            <FormattedCount count={count} />
-          </EuiLink>
-        </SecurityCellActions>
+            <EuiLink onClick={() => handleClick({ userName, severity: 'low' })}>
+              <FormattedCount count={count} />
+            </EuiLink>
+          </SecurityCellActions>
+        ) : (
+          <FormattedCount count={count} />
+        )}
       </EuiHealth>
     ),
   },