This is the Trace Id: e6d4a7bd115f67905e0265aa84ec7d7d
Skip to main content
Microsoft Security
A close-up of a keyboard.
AI-powered SecOps

Microsoft Sentinel pricing

    Predict and stop attacks across clouds and platforms with industry-leading security information and event management (SIEM) which unifies AI, security orchestration and response, user and entity behavior analytics, threat intelligence, and a cost-effective data lake.
    Contact Sales
    OVERVIEW

    Transform your security operations with Microsoft Sentinel

    Microsoft Sentinel is an AI-powered SIEM with a unified data lake, allowing you to reduce costs by aligning data storage and processing to your business needs. Learn more.

    Flexible pricing plans

    Data tiers in Microsoft Sentinel offer flexibility, cost-efficiency, and comprehensive coverage.

    Analytics tier

    Supports all log types, with full analytics, alerts, and query capabilities. There are two payment options: Pay-As-You-Go and commitment tiers.
    Learn more

     Data lake tier

    Low-cost, long-term storage of security data used for investigations, querying, and compliance.
    Learn more
    PRICING TABLE

    Explore pricing options

    Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, the currency exchange rate and taxes which may be applicable.1
    Commitment tiers offer predictable costs and savings up to 52% over Pay-As-You-Go rates by allowing customers to reserve daily data ingestion capacity for the analytics tier, from 100 GB to 50,000 GB. They can be upgraded at any time and downgraded after 31 days. Usage exceeding the commitment tier will be billed at the same discounted rate.2
    Microsoft Sentinel solution for SAP® applications help monitor, detect, and respond to sophisticated threats throughout the business logic and application layers for SAP systems hosted on Azure, GCP, AWS, or on-premises. Learn more here.
    GET STARTED

    Protect everything

    Make your future more secure. Explore your security options today.
    Contact us
    A close-up of a blue and pink graph
    PRICING CALCULATOR

    Azure Pricing calculator

    Calculate your estimated hourly or monthly costs for using Azure. Log in to save cost estimates and view your Azure agreement pricing.
    Try the pricing calculator
    RESOURCES

    Find more detailed information about Microsoft Sentinel

    Product capabilities

    Explore Microsoft Sentinel’s features and capabilities.
    Learn more

    Service-level agreement

    Review the SLA.
    Learn more

    Technical Documentation

    Review technical tutorials, videos, and more resources.
    Read documentation

    Frequently asked questions

    • Commitment tiers allow you to reserve a set amount of daily data ingestion capacity for Microsoft Sentinel for a fixed, predictable daily fee. You can upgrade your requested commitment at any time. Your new commitment tier will be effective at the start of the next UTC day. However, the minimum commitment period before you can opt out or reduce your capacity reservation is 31 days.
    • Commitment tiers are applicable at a workspace level and cannot be grouped across workspaces or subscriptions.
    • Ingest high-value security data like identity logs, threat intelligence, and endpoint alerts into the analytics tier to power real-time detections and investigations. The data lake tier is ideal for high-volume logs like network, firewall, and proxy logs that need long-term retention for forensics and historical analysis.
    • Any Azure services that you use in addition to Microsoft Sentinel, such as Azure Log Analytics, Azure Logic Apps, Azure Machine Learning, and solutions, are charged according to their applicable pricing.
    • Customers who do not use the data lake should check the Azure Monitor pricing page for legacy Search Jobs, Search Queries, and Log Data Restore details. Learn more
    1. [1]
      Prices are calculated based on US dollars. Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.
    1. [2]
      Logs in the Microsoft Sentinel analytics tier are stored within an Azure Monitor Log Analytics workspace. Upon enabling the Microsoft Sentinel data lake, new logs will automatically be stored in the data lake at no additional cost.

    Follow Microsoft Security