siemvendorsRFP Dossier, 2026
Sheet 11 / Sumo Logic Cloud SIEM
Digital Signet / SIEM Vendor Dossier 2026
Verified 2026-09-24
Owner/Francisco Partners(2023-05-12)Sumo Logic cloud

Sumo Logic Cloud SIEM: pricing, ownership, MITRE coverage

Byline: Oliver Wakefield-Smith, Founder, Digital Signet.

Sumo Logic Cloud SIEM[15] sells under Flex, now the default plan for new customers. Flex inverts the usual SIEM meter: ingesting and indexing log data carries no cost, and credits are consumed by the volume a query scans plus the storage kept behind it. Sumo Logic's own pricing page headlines "$0 ingest" and sizes its tiers by scans per GB ingested rather than by an ingest rate, and publishes no dollar unit price, so the vendor is quote-only here. The $2.50/GB Enterprise Suite ingest figure this sheet previously carried describes a product that no longer exists. Cloud SIEM Enterprise remains the security SKU layered on the credit pool.

Post-take-private

Francisco Partners completed the take-private in May 2023[29]. Strategy widened to observability plus security; the Credits model lets buyers shift spend between log analytics and SIEM without re-papering the contract.

Credibility

For a SIEM-first buyer Sumo Logic Cloud SIEM Enterprise remains credible. For a Splunk-replacement at scale the content library still trails Splunk ES.

What shifted

Pricing moved to Flex, now the default plan for new customers: ingesting and indexing log data carries no cost and credits are consumed by the data a query scans plus storage. Tiers are sized by scans per GB ingested (500-750, 750-1500, 1500-2000) rather than by an ingest rate, and Sumo Logic publishes no dollar unit price, so the vendor is quote-only. Francisco Partners completed take-private May 2023; strategy widened to observability plus security, and the credits model still lets buyers shift spend between log analytics and SIEM without re-papering. Pricing reference at https://www.sumologic.com/pricing/[15].

Ingest TCO strip

Live calculator
VendorAnnual TCOBasis
Splunk Enterprise SecurityQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Microsoft Sentinel$785KAnalytics Logs PAYG $4.30/GB times annual ingest with retention adjustment.
Google Chronicle Security OperationsQuoteQuote-only. Request an RFP-grade quote before benchmarking.
CrowdStrike Falcon Next-Gen SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
IBM QRadar SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Exabeam New-Scale FusionQuoteQuote-only. Request an RFP-grade quote before benchmarking.
LogRhythm AxonQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Securonix Unified Defense SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Sumo Logic Cloud SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Elastic Security$173KServerless ingest $0.85/GB plus a baseline VCU/storage allocation.
Panther Cloud-Native SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Palo Alto Cortex XSIAMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
SentinelOne Singularity AI SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Rapid7 InsightIDR$101KPer-asset $5.62 per month at the entry tier (500-asset minimum).
Stellar Cyber Open XDR + SIEMQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Devo PlatformQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Snowflake Cybersecurity Workload$219KEstimated $1.20 effective per ingested GB across credits and storage at standard tier (excludes detection layer).
AnvilogicQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Hunters SOC PlatformQuoteQuote-only. Request an RFP-grade quote before benchmarking.
Graylog Security$274KCloud Security tier list approximately $1.50/GB times annual ingest with retention.

You enter GB/day. You get an annual number per vendor that publishes a unit price. Quote-only vendors are blocked, not estimated.

Related dossier sheets