Sift SecurityDemo
Sift SecurityTrial
Sift SecurityContact

Pricing Summary

Find a Plan that Fits Your Needs

Sift Security's Threat Hunting & Incident Response


Small

$2000 per month

Up to 200 monitored hosts*
Up to 5 Users

  • Unlimited data*
  • Deployed on customer infrastructure
  • Rules based detection
  • Anomaly detection
  • Alert prioritization
  • Graph Canvas Visualization
  • Reporting
  • Incident Response
  • Includes supported data sources*
  • Email support

Medium

$10 per host per month

201 - 500 monitored hosts
Up to 20 Users

  • Unlimited data*
  • Deployed on customer infrastructure
  • Rules based detection
  • Anomaly detection
  • Alert prioritization
  • Graph Canvas Visualization
  • Reporting
  • Incident Response
  • Includes supported data sources*
  • Email and phone support

Enterprise

Get a quote

500 monitored hosts or more
Unlimited users

  • Unlimited data*
  • Sift hosting or deploy on customer infrastructure
  • Rules based detection
  • Anomaly detection
  • Alert prioritization
  • Graph Canvas Visualization
  • Reporting
  • Incident Response
  • Includes supported data sources*
  • Email and phone support

Integration, customization, data science services available

SIEM Add-On

Get a quote

50 + % discounts available
Unlimited users

  • Available for Customers enhancing existing SIEMs
  • SIEM is primary data store
  • Export alerts and context from existing SIEM
  • Same features as Enterprise

Integration, customization, data science services available

* Notes:

  • Annual billing
  • A monitored host / instance is defined as a physical or virtual network element, server, or machine that sends data to Sift Security. In cases where there is an intermediate device (e.g. Network Device, Log Management tool, etc.) that sends data, you should count the entities that generate the data. In some situations monitoring the number of users is a more appropriate metric, in which case we may be able to scale on users instead of hosts.
  • Listed pricing is only for the software and excludes infrastructure.
  • If Sift Security provides, monitors & manages the infrastructure, Sift passes through AWS costs plus a 25% surcharge.
  • Sift can work with you to estimate the infrastructure charges, which is based on data volume, the number of users, and data retention requirements.
  • Supported data sources can be found here.