Start free. Pay when the queue grows.
Every plan includes the full Sentendra platform: case management, alert triage, observables, reporting and integrations. Paid plans add Sentendra-hosted AI analysis on dedicated GPU infrastructure.
- CommunityFree, AI off by default
- SOCFrom $833/mo billed annually
- MSSP$1,000/mo + $150 per managed customer
- EnterpriseFrom $30,000/yr, single-tenant
| Feature | Community Free Evaluate Sentendra. Single organisation, 3 seats, AI off. Start free | Recommended for internal teams SOC $833/mo, billed $9,990/yr For internal security teams: banks, fintechs, hospitals. 10 seats included, single organisation. Start SOC | MSSP $1,000/mo + $150 per managed customer For managed security providers. Per-customer Elastic credentials, branding and SLA policies. Annual contract, 5-customer minimum. Talk to sales | Enterprise From $30,000/yr Dedicated single-tenant deployment, SSO, BYO LLM, hosted in your region or country. One-off setup $5,000–$10,000. Contact sales |
|---|---|---|---|---|
| Limits | ||||
| Seats included | 3 | 10 | 25 | 100 |
| Managed customers | 1 | 1 | From 5 | Unlimited |
| Alerts / month | 5,000 | 75,000 | 250,000 | 1,000,000 |
| AI analyses / month | 0 | 5,000 | 20,000 | 100,000 |
| Concurrent open cases | 25 | 500 | 2,000 | 10,000 |
| SIEM connections | 1 | 5 | Unlimited | Unlimited |
| Sandbox detonations / month | 0 | 50 | 200 | Unlimited |
| API requests / minute | 60 | 600 | 1,200 | 6,000 |
| Detection & response | ||||
| SIEM connectors | ✓ | ✓ | ✓ | ✓ |
| SIEM backfill | — | ✓ | ✓ | ✓ |
| Ingestion monitoring | — | ✓ | ✓ | ✓ |
| Threat map | — | ✓ | ✓ | ✓ |
| Threat intelligence | — | ✓ | ✓ | ✓ |
| Advanced search | — | ✓ | ✓ | ✓ |
| Advanced cases | — | ✓ | ✓ | ✓ |
| Closure suggestions | — | ✓ | ✓ | ✓ |
| Intelligence graph | — | ✓ | ✓ | ✓ |
| Security devices | — | — | — | ✓ |
| Detection as code | — | — | — | ✓ |
| Sandbox | — | ✓ | ✓ | ✓ |
| AI | ||||
| AI features | — | ✓ | ✓ | ✓ |
| AI operations | — | — | — | ✓ |
| AI training | — | — | — | ✓ |
| AI cost tracking | — | — | — | ✓ |
| Bring-your-own LLM | — | — | — | ✓ |
| Analytics & reporting | ||||
| Advanced analytics | — | ✓ | ✓ | ✓ |
| Advanced reporting | — | ✓ | ✓ | ✓ |
| Reports v2 | — | ✓ | ✓ | ✓ |
| Audit log | — | ✓ | ✓ | ✓ |
| Audit log export | — | — | ✓ | ✓ |
| Collaboration & workflow | ||||
| Collaboration | — | ✓ | ✓ | ✓ |
| Playbooks | — | ✓ | ✓ | ✓ |
| Integrations | — | ✓ | ✓ | ✓ |
| n8n log ingest | — | ✓ | ✓ | ✓ |
| Multi-customer | — | — | ✓ | ✓ |
| ITSM connectors | — | — | — | ✓ |
| Enterprise & compliance | ||||
| SSO | — | — | — | ✓ |
Every plan includes: two-factor authentication · activity timeline · alerts · analytics · cases · CVE browser · notifications · observables · search · settings · SIEM connectors · users
How MSSP pricing works
A $1,000/month platform fee plus $150 for each managed customer per month, on an annual contract with a 5-customer minimum (so from $1,750/month). Example: 12 managed customers = $1,000 + 12 × $150 = $2,800/month.
AI and your data
Community has AI off by default: no model runs, and no data leaves the platform for analysis. Adding AI on Community requires your own OpenAI or Anthropic key (you pay them directly). On SOC, MSSP and Enterprise we run a GPU-hosted model on infrastructure we control, so your alerts, hostnames and observables never reach a third-party LLM. You can also choose BYO key on paid plans if you prefer your own provider under your DPA. The AI provider is a per-tenant setting and can be changed at any time.
FAQ
Extra seats on SOC: $60/seat/month.