Graylog Security: pricing, ownership, MITRE coverage
Byline: Oliver Wakefield-Smith, Founder, Digital Signet.
Graylog Security[26] sells Cloud and Self-Managed tiers. Cloud Security list at approximately $1.50/GB at small commercial bands. Open-source Graylog Open remains free of charge for the platform.
Open-source foundation
Like Elastic, Graylog's open-source foundation is the lock-in counter-argument. A mid-market buyer priced out of Splunk can run Graylog self-managed at near-zero platform cost.
Where Graylog fits
Mid-market buyer with a small SOC, a need for SIEM compliance coverage, and pressure on the platform line item. API Security is bundled at the enterprise tier.
What shifted
API Security generally available and bundled into the Security SKU at the enterprise tier. Open-source foundation remains the lock-in counter-argument. Pricing reference at https://graylog.org/pricing/[26].
Ingest TCO strip
| Vendor | Annual TCO | Basis |
|---|---|---|
| Splunk Enterprise Security | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Microsoft Sentinel | $785K | Analytics Logs PAYG $4.30/GB times annual ingest with retention adjustment. |
| Google Chronicle Security Operations | $8K | Standard tier $0.65 per employee per month times headcount. 12-month retention included. |
| CrowdStrike Falcon Next-Gen SIEM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| IBM QRadar SIEM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Exabeam New-Scale Fusion | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| LogRhythm Axon | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Securonix Unified Defense SIEM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Sumo Logic Cloud SIEM | $456K | Cloud Flex effective $2.50/GB at Enterprise Suite times annual ingest with retention. |
| Elastic Security | $173K | Serverless ingest $0.85/GB plus a baseline VCU/storage allocation. |
| Panther Cloud-Native SIEM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Palo Alto Cortex XSIAM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| SentinelOne Singularity AI SIEM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Rapid7 InsightIDR | $101K | Per-asset $5.62 per month at the entry tier (500-asset minimum). |
| Stellar Cyber Open XDR + SIEM | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Devo Platform | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Snowflake Cybersecurity Workload | $219K | Estimated $1.20 effective per ingested GB across credits and storage at standard tier (excludes detection layer). |
| Anvilogic | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Hunters SOC Platform | Quote | Quote-only. Request an RFP-grade quote before benchmarking. |
| Graylog Security | $274K | Cloud Security tier list approximately $1.50/GB times annual ingest with retention. |
You enter GB/day. You get an annual number per vendor that publishes a unit price. Quote-only vendors are blocked, not estimated.