Managed SIEM Pricing Guide – UnderDefense

Managed SIEM common pricing models

When evaluating Managed SIEM pricing, it’s crucial to consider factors such as service level requirements, customization needs, deployment preferences, and the service provider’s reputation. Here’s a pricing breakdown for Managed SIEM services based on different models:

Subscription-based:

In this model, clients pay a recurring subscription fee to access the Managed SIEM service. Pricing tiers can vary based on the level of service and the number of features included. Clients receive invoices either monthly or quarterly, depending on their preference.

Prepayment 100% upfront:

This approach often covers a specified contract duration, such as one year or more. By paying in advance, clients may benefit from discounts or other incentives the service provider offers. This model ensures that the service is fully funded from the outset, providing financial stability and predictability for both the client and the provider.

Per-user or per-device:

Some providers offer pricing based on the number of users or devices being monitored. This can be advantageous for organizations with a predictable user/device count and help tailor costs to actual usage.

The volume of data processed:

Pricing may be structured around the volume of data the SIEM platform processes. This could include logs from servers, applications, network devices, etc. Tiered pricing based on data volume ensures scalability and fair pricing based on usage.

Client-owned SIEM:

In this model, the client purchases and owns the SIEM software outright. Costs typically include upfront licensing fees, implementation, integration, and ongoing maintenance costs. The client is responsible for managing the infrastructure and security operations internally.

MSSP-owned SIEM:

With this model, the Managed Security Service Provider (MSSP) owns and operates the SIEM solution on behalf of the client. Pricing is usually subscription-based, with clients paying a recurring fee for access to the service. Costs may include subscription fees, customization, integration, and additional services such as incident response and support.

Custom pricing:

Custom pricing may be negotiated for organizations with unique requirements or larger-scale deployments. This could include specialized integrations, additional features, or extended support options.