Detection Engineering, Priced To Scale
From your first log source to a multi-tenant SOC — every plan ships with detection rules, threat hunting, and MITRE ATT&CK coverage. AI gets smarter as you grow.
Free
Basic detection engineering and core hunting
- 1GB log ingestion
- 1 user · 1 tenant
- 14-day log retention
INCLUDES
- Email signup & predefined roles
- Community detection rules
- Manual threat hunting
- MITRE ATT&CK coverage view
- Prebuilt dashboards
Pro
Sigma rule conversion with AI filtering
- 1 GB/day log ingestion
- 15 users · 3 tenants
- 30-day log retention
EVERYTHING IN FREE, PLUS
- SSO (SAML / OIDC)
- Sigma Rule Converter
- Custom detection rules
- Guided threat hunting
- Custom charts & dashboards
- Slack & Teams alerts
- AI alert triage & noise reductionAI
Advance
Proactive AI hunting and multi-tenant SOCs
- 5 GB/day log ingestion
- 50 users · 10 tenants
- 1-year log retention
EVERYTHING IN PRO, PLUS
- Multi-tenant + custom roles (RBAC)
- AI detection authoringAI
- AI-assisted threat huntingAI
- MITRE gap analysis & recosAI
- Compliance reporting (SOC2 / ISO)
- Criticality-based alert routing
Enterprise
Unlimited scale, private AI, dedicated engineers
- Unlimited log ingestion
- Unlimited users & tenants
- Unlimited log retention
EVERYTHING IN ADVANCE, PLUS
- Granular RBAC + SCIM & custom IdP
- Private / fine-tuned AI modelsAI
- Dedicated cloud region & data residency
- Compliance reporting & audit export
- Dedicated detection engineer & TAM
Everything You Need To Detect, Hunt, And Respond
Sigma Rule Converter
Bring your Sigma rules and convert them to native detections in one click — no rewriting, no lock-in.
AI threat hunting
Hunt across petabytes in plain language. SXMonitor's copilot turns a question into a query and surfaces leads.
MITRE ATT&CK coverage
See your defensive coverage mapped to the ATT&CK matrix, with AI-prioritized gaps to close next.
Custom charts & tenants
Build dashboards from any log source and run isolated workspaces per tenant, team, or customer.
Every Capability, Side By Side
| Most Popular | ||||
|---|---|---|---|---|
| Onboarding & access | ||||
| Sign up and access method | Email + SSO | Email + SSO | SSO + SCIM | SSO + custom IdP |
| Tenant creation | 1 | 3 | 10 | Unlimited |
| User seats | 1 | 15 | 50 | Unlimited |
| Custom roles (RBAC) | – | Granular | ||
| Detection engineering | ||||
| Log ingestion | 1 GB | 1 GB/day | 5 GB/day | Unlimited |
| Detection rules | Community | Custom | Unlimited | Unlimited |
| Sigma Rule Converter | – | |||
| AI detection authoring | – | Suggestions | Full | Private model |
| Threat hunting & intel | ||||
| Threat hunting | Manual | Guided | AI-assisted | AI-assisted |
| Query & save hunts | – | |||
| MITRE ATT&CK | Coverage view | Mapping | + Gap analysis | + Reporting |
| Threat intelligence feeds | – | – | – | |
| Analytics & reporting | ||||
| Custom charts & dashboards | Prebuilt | Custom | Unlimited | Unlimited |
| Log retention | 14 days | 30 days | 1 year | Unlimited |
| Scheduled reports & exports | – | |||
| Compliance reporting (SOC2 / ISO) | – | – | ||
| Alerting & routing | ||||
| Alert channels | + Slack & Teams | All channels | All channels | |
| Criticality-based routing | – | Up to 100/day | ||
| On-call paging (PagerDuty / Opsgenie) | – | – | ||
| Custom webhooks & per-tenant routing | – | – | ||
| AI capabilities | ||||
| AI alert triage & noise reduction | – | |||
| AI threat-hunting copilot | – | – | ||
| AI MITRE gap recommendations | – | – | ||
| Natural-language chart builder | – | – | ||
| Private / fine-tuned AI models | – | – | – | |
| Support & operations | ||||
| Support | Community | Email & chat | Priority 24/7 | Dedicated TAM |
| Uptime SLA | – | 99.9% | 99.95% | 99.99% |
| Data residency | US / EU | US / EU | US / EU | Dedicated region |
| Dedicated detection engineer | – | – | – |
Build Your Plan
Share your requirements, and our team will design a custom plan and pricing — typically within 24 hours.
- Unlimited tenants, users & logs
- Private, fine-tuned AI models
- Dedicated cloud & data residency
- Custom SLAs, MSA, and DPA
- Dedicated engineer & TAM support