AlienVault Pricing – Affordable Plans to Fit Any Budget

Affordable Pricing to Fit Every Budget

We believe every organization deserves great security. Explore pricing for our
USM Anywhere™ editions below or contact us for a quote ›

Estimate your monthly data volume to adjust pricing:

 
Help me estimate Help me estimate Assume 1 GB per month per asset in your environment, including all cloud and on-premises servers and network devices like firewalls and routers. For example, for an environment with 300 assets, choose the 500 GB tier.

Essentials

$650

per month


Ideal for small IT teams looking to set up a security & compliance program quickly, easily, and affordably.


  • 15 days of real-time event searchSearch, investigate, and report on your most recent of security data with immediate results.
  • 1 sensor (AWS, Azure, Hyper-V, VMware)Deploy a lightweight sensor in each cloud or on-premises environment to collect and send log data to USM Anywhere.
  • 5 user seats
  • 10x5 support

  • Asset discovery & inventoryContinually scan your environments to identify all connected assets, software, services and configurations.
  • Vulnerability assessmentBe alerted to the weak points in your environments that could be exploited, prioritized by potential risk level.
  • Intrusion detectionDetect anomalous or suspicious activities in your environments that may indicate an intrusion or attack.
  • SIEM event correlationAnalyze your security events and log data against the latest correlation rules from AlienVault Labs to detect emerging threats.
  • Incident responseQuickly investigate and respond to threats with critical threat data plus remediation guidance—all in a single pane of glass.
  • Log managementSecurely store your raw log data for compliance and forensics in cold storage for 12 months (extensions available.)
  • Compliance reportsEasily demonstrate compliance with pre-built compliance reports for PCI, HIPAA, and NIST CSF. Customize and export with ease.
Best value for most businesses

Standard

$1575

per month


Ideal for IT security teams looking to gain efficiency through security orchestration, automation, and deeper security analysis.


  • 90 days of real-time event searchSearch, investigate, and report on your most recent of security data with immediate results.
  • 2 sensors (AWS, Azure, Hyper-V, VMware)Deploy a lightweight sensor in each cloud or on-premises environment to collect and send log data to USM Anywhere.
  • 10 user seats
  • 24x5 support

  • Asset discovery & inventoryContinually scan your environments to identify all connected assets, software, services and configurations.
  • Vulnerability assessmentBe alerted to the weak points in your environments that could be exploited, prioritized by potential risk level.
  • Intrusion detectionDetect anomalous or suspicious activities in your environments that may indicate an intrusion or attack.
  • SIEM event correlationAnalyze your security events and log data against the latest correlation rules from AlienVault Labs to detect emerging threats.
  • Incident responseQuickly investigate and respond to threats with critical threat data plus remediation guidance—all in a single pane of glass.
  • Log managementSecurely store your raw log data for compliance and forensics in cold storage for 12 months (extensions available.)
  • Compliance reportsEasily demonstrate compliance with pre-built compliance reports for PCI, HIPAA, and NIST CSF. Customize and export with ease.

  • Integrated ticketing & alertingAutomate notifications and ticketing workflows with leading third-party software to quickly respond to threats.
    (Service Now, Jira, Slack, Datadog)
  • Orchestration with security toolsRespond quickly to threats by orchestrating actions with multiple security tools to block malicious IPs, isolate infected endpoints, and more—all from one centralized location.
    (such as Palo Alto Networks, Carbon Black, Cisco Umbrella)
  • Automated incident response & forensicsReduce the time between detection and response by automating repetitive, investigative, and stop-gap incident response actions.
  • Dark web monitoringBe alerted to any stolen user credentials discovered on the dark web, indicative of a compromised account or breach.
  • Federation readyCentralizes security monitoring for distributed architectures with multiple USM Anywhere deployments. (USM Central add-on).

Enterprise

Contact Sales for Pricing ›


Ideal for enterprise-level security teams and heavily distributed organizations


  • 90 days of real-time event searchSearch, investigate, and report on your most recent of security data with immediate results.
  • 10 sensors (AWS, Azure, Hyper-V, VMware)Deploy a lightweight sensor in each cloud or on-premises environment to collect and send log data to USM Anywhere.
  • 10 user seats
  • 24x7 support

  • Asset discovery & inventoryContinually scan your environments to identify all connected assets, software, services and configurations.
  • Vulnerability assessmentBe alerted to the weak points in your environments that could be exploited, prioritized by potential risk level.
  • Intrusion detectionDetect anomalous or suspicious activities in your environments that may indicate an intrusion or attack.
  • SIEM event correlationAnalyze your security events and log data against the latest correlation rules from AlienVault Labs to detect emerging threats.
  • Incident responseQuickly investigate and respond to threats with critical threat data plus remediation guidance—all in a single pane of glass.
  • Log managementSecurely store your raw log data for compliance and forensics in cold storage for 12 months (extensions available.)
  • Compliance reportsEasily demonstrate compliance with pre-built compliance reports for PCI, HIPAA, and NIST CSF. Customize and export with ease.

  • Integrated ticketing & alertingAutomate notifications and ticketing workflows with leading third-party software to quickly respond to threats.
    (Service Now, Jira, Slack, Datadog)
  • Orchestration with security toolsRespond quickly to threats by orchestrating actions with multiple security tools to block malicious IPs, isolate infected endpoints, and more—all from one centralized location.
    (such as Palo Alto Networks, Carbon Black, Cisco Umbrella)
  • Automated incident response & forensicsReduce the time between detection and response by automating repetitive, investigative, and stop-gap incident response actions.
  • Dark web monitoringBe alerted to any stolen user credentials discovered on the dark web, indicative of a compromised account or breach.
  • Federation readyCentralizes security monitoring for distributed architectures with multiple USM Anywhere deployments. (USM Central add-on).
  • Support for higher data volumes

Training and Onboarding

AlienVault USM Anywhere LiftOff Packages are designed for every customer to get up and running quickly on USM Anywhere. Each LiftOff Package includes implementation services and training. Implementation services help you get your USM Anywhere deployment installed and configured so that you can start detecting threats on Day One. Training provides you with the direct product knowledge you need for effective, daily use of USM Anywhere. Learn more about training ›

LiftOff Packages are highly recommended, yet optional for all new customers and start at $4295. The LiftOff Package fee, along with any applicable taxes, is not included in the estimated monthly cost shown above. For a complete quote including these additional fees, please  contact us ›

Customize It for Your Organization.

Need more sensors, storage, training options, or help to deploy? No problem. Just contact us and we’ll work with you to create the perfect bundle!

Contact us now to customize ›


Watch a Demo ›
GET PRICE FREE TRIAL CHAT