Pricing
Priced per user, per month, and the rate comes down as you scale. What separates the packages is the detection content you get and the kinds of data you can bring — SMB is not a crippled tier, it is the same platform on standard rules.
Replacing a volume-priced platform? Use the SIEM cost and TCO calculator to compare data, retention, services, and operating labor against your quote.
$7
per user on SMB
$30
monthly minimum on SMB
$5
per user at 200+ users
1yr
retention, every package
Estimate
Pick a package, enter your environment, and the monthly cost follows. Metered assets carry an included volume allowance — 3 GB each on SMB and Core, 2 GB on Business — so storage only bills above what your seats already cover.
Package
Custom rules · Min 50 users
Monthly estimate
$300
per month · Core · one year of retention included
All 150 GB sits inside the 150 GB your assets already include, so storage adds nothing.
Check this against a real environmentThe packages
$7
per user, per month
A $30 monthly floor. A five-seat customer is a real customer, not an exception you have to justify.
Standard rules
Data sources
$6
per user, per month
Starts at 50 users, so the effective floor is $300 per month.
Custom rules
Adds
$5
per user, per month
Starts at 200 users, so the effective floor is $1,000 per month.
Custom rules
Adds
In every package
Retention, analytics and case management are in all three. Moving up a package buys you different detection content and different data, not the features that should have been included.
Included in every package. Not a retention tier you buy back later.
Real-time processing on the same data fabric under all three packages.
UEBA clustering and behavioural scoring, not just signature matching.
Prioritised cases with the correlated evidence attached to each one.
Metered alongside
$10
per server, per month
Servers are metered separately from users, in every package.
$2.99
per GB stored
Applies where volume is the better measure than seats.
3GB
per asset on SMB and Core
Business includes 2GB per asset, trading allowance for the lower seat rate.
The Unbounded SIEM
Thirty minutes, live product, your question on screen. You leave with the written finding whether or not you buy anything.
