Skip to main content
SenseOn

SIEM cost calculator

What will a year of SIEM cost you?

Microsoft Sentinel and Splunk at published list price, SenseOn at its own rates, all from the same inputs. Data cost only, and every price is sourced or marked as modelled. Nothing you type leaves this page unless you ask for the PDF.

Your estate

GB a day

Everything you want covered: endpoint, identity, cloud, firewall, DNS, proxy.

days

Sentinel keeps analytics data free for 90 days.

33%

The share of your data that needs real-time detection. SenseOn prices the rest as searchable storage.

Sentinel data lakeNot used
0%

0 GB a day. Microsoft says lake-only data is not available for real-time analytics or threat hunting.

SenseOn costs $124,399 a year for this data.

That is 41% below Microsoft Sentinel and 53% below Splunk at list price, from the same inputs. Splunk is shown with standard retention only, so its figure understates longer retention.

  1. SenseOn at our rates

    $124,399

  2. Microsoft Sentinel list price

    $211,560

  3. Splunk Cloud + ES published list price

    $265,650

How each figure is built

Data cost only, one-year term. SenseOn uses Sales Order Wizard rates and a 30% edge reduction (modelled, applied to Splunk too). Your quote depends on your sources and retention.

How each annual figure is built
SenseOn$124,399
Real-time detection33% of data, including a 30-day working window$36,826
Edge processingAll data, before storage$31,565
Searchable storageEverything else, for your full retention$56,008
Microsoft Sentinel$211,560
Analytics ingestionEvery GB on the analytics tier, cheapest option: 100 GB a day commitment tier$162,060
Retention beyond 90 days$0.10 per GB per month, at steady state$49,500
Splunk Cloud + ES$265,650
Splunk Cloud105 GB a day after the same 30% edge trimming, sold as 150 GB a day$151,800
Enterprise SecurityDetection content, as SenseOn includes it$113,850
Splunk published list price (UK G-Cloud, Jan 2025). Standard searchable retention only; archived data must be restored, which can take up to 24 hours, before it can be searched.

Keep this estimate

Take these numbers into your renewal

A four-page PDF your finance team can check line by line.

  1. 01

    Your inputs and every figure

    The same comparison as this page, with the working behind each number.

  2. 02

    Your quote beside list price

    If you add your current quote, it sits next to these figures for comparison.

  3. 03

    A source for every price

    Microsoft, Splunk and SenseOn rates, each with where it came from and when.

Your current SIEM (optional)

Add your renewal quote and the PDF sets it beside these list prices. We also use it, unnamed, to keep our price benchmarks honest.

The PDF downloads straight away. We keep your details and these figures so SenseOn can follow up. See our privacy policy.

Assumptions and sources

Sentinel prices are Microsoft's US list prices for the East US region, in USD, read on 28 September 2026. They exclude tax, discounts, free allowances such as the Microsoft 365 E5 data benefit, and separately billed Azure services such as Logic Apps. Your contract, region and currency will change them.

ItemValue usedSource
Sentinel analytics ingestion, pay-as-you-go$4.30 per GBAzure Retail Prices API
Sentinel commitment tiers50 to 50,000 GB a day; the calculator picks the cheapest, with overage at the tier rateMicrosoft Sentinel billing
Sentinel retention90 days free, then $0.10 per GB per monthMicrosoft Sentinel billing
Sentinel data lake$0.15 per GB in; $0.026 per GB per month stored at 6:1Manage data tiers in Microsoft Sentinel
Splunk Cloud + Enterprise SecurityPublished list price per GB a day (UK G-Cloud 14 price list, 22 Jan 2025), after the same edge trimmingSplunk price list, G-Cloud 14
Splunk archive restoreArchived data must be restored before it can be searched. Restoring can take up to 24 hours, and restored data is searchable for one month by default. Splunk is priced with standard searchable retention onlySplunk Cloud Platform: store expired data in a Splunk-managed archive
SenseOnEdge processing 0.25 credits per GB; real-time detection 1.25 credits per GB, including a 30-day working window; searchable storage 0.08 then 0.03 credits per GB-month; commitment bands £1.50 / £1.20 / £1.00 / £0.85 per credit; above 1,000 GB a day a volume rate card; 10% headroom; 10% one-year premium; £1 = $1.41; Data volume is one meter, not the whole billSenseOn Sales Order Wizard rate card, 18 Sep 2026
How SenseOn pricing works
Edge reduction30%, modelled (conservative; our pricing page cites about 40%). Applied to SenseOn and SplunkModelled assumption
Splunk Edge Processor (why Splunk gets the same trimming)

The working is explained in our Microsoft Sentinel pricing guide, Splunk pricing guide and Sentinel vs Splunk vs SenseOn comparison.