SIEM cost calculator
Microsoft Sentinel and Splunk at published list price, SenseOn at its own rates, all from the same inputs. Data cost only, and every price is sourced or marked as modelled. Nothing you type leaves this page unless you ask for the PDF.
That is 41% below Microsoft Sentinel and 53% below Splunk at list price, from the same inputs. Splunk is shown with standard retention only, so its figure understates longer retention.
SenseOn at our rates
Microsoft Sentinel list price
Splunk Cloud + ES published list price
Data cost only, one-year term. SenseOn uses Sales Order Wizard rates and a 30% edge reduction (modelled, applied to Splunk too). Your quote depends on your sources and retention.
| SenseOn | $124,399 | |
|---|---|---|
| Real-time detection33% of data, including a 30-day working window | $36,826 | |
| Edge processingAll data, before storage | $31,565 | |
| Searchable storageEverything else, for your full retention | $56,008 | |
| Microsoft Sentinel | $211,560 | |
| Analytics ingestionEvery GB on the analytics tier, cheapest option: 100 GB a day commitment tier | $162,060 | |
| Retention beyond 90 days$0.10 per GB per month, at steady state | $49,500 | |
| Splunk Cloud + ES | $265,650 | |
| Splunk Cloud105 GB a day after the same 30% edge trimming, sold as 150 GB a day | $151,800 | |
| Enterprise SecurityDetection content, as SenseOn includes it | $113,850 | |
| Splunk published list price (UK G-Cloud, Jan 2025). Standard searchable retention only; archived data must be restored, which can take up to 24 hours, before it can be searched. | ||
Keep this estimate
A four-page PDF your finance team can check line by line.
Your inputs and every figure
The same comparison as this page, with the working behind each number.
Your quote beside list price
If you add your current quote, it sits next to these figures for comparison.
A source for every price
Microsoft, Splunk and SenseOn rates, each with where it came from and when.
Sentinel prices are Microsoft's US list prices for the East US region, in USD, read on 28 September 2026. They exclude tax, discounts, free allowances such as the Microsoft 365 E5 data benefit, and separately billed Azure services such as Logic Apps. Your contract, region and currency will change them.
| Item | Value used | Source |
|---|---|---|
| Sentinel analytics ingestion, pay-as-you-go | $4.30 per GB | Azure Retail Prices API |
| Sentinel commitment tiers | 50 to 50,000 GB a day; the calculator picks the cheapest, with overage at the tier rate | Microsoft Sentinel billing |
| Sentinel retention | 90 days free, then $0.10 per GB per month | Microsoft Sentinel billing |
| Sentinel data lake | $0.15 per GB in; $0.026 per GB per month stored at 6:1 | Manage data tiers in Microsoft Sentinel |
| Splunk Cloud + Enterprise Security | Published list price per GB a day (UK G-Cloud 14 price list, 22 Jan 2025), after the same edge trimming | Splunk price list, G-Cloud 14 |
| Splunk archive restore | Archived data must be restored before it can be searched. Restoring can take up to 24 hours, and restored data is searchable for one month by default. Splunk is priced with standard searchable retention only | Splunk Cloud Platform: store expired data in a Splunk-managed archive |
| SenseOn | Edge processing 0.25 credits per GB; real-time detection 1.25 credits per GB, including a 30-day working window; searchable storage 0.08 then 0.03 credits per GB-month; commitment bands £1.50 / £1.20 / £1.00 / £0.85 per credit; above 1,000 GB a day a volume rate card; 10% headroom; 10% one-year premium; £1 = $1.41; Data volume is one meter, not the whole bill | SenseOn Sales Order Wizard rate card, 18 Sep 2026 How SenseOn pricing works |
| Edge reduction | 30%, modelled (conservative; our pricing page cites about 40%). Applied to SenseOn and Splunk | Modelled assumption Splunk Edge Processor (why Splunk gets the same trimming) |
The working is explained in our Microsoft Sentinel pricing guide, Splunk pricing guide and Sentinel vs Splunk vs SenseOn comparison.
