Detection Engineering, Priced To Scale
From your first log source to a multi-tenant SOC — every plan ships with detection rules, threat hunting, and MITRE ATT&CK coverage. AI gets smarter as you grow.
Free
Basic detection engineering and core hunting
- 1GB log ingestion
- 1 user · 1 tenant
- 14-day log retention
INCLUDES
- Email signup & predefined roles
- Community detection rules
- Manual threat hunting
- MITRE ATT&CK coverage view
- Prebuilt dashboards
Enterprise
Unlimited scale, private AI, dedicated engineers
- Unlimited log ingestion
- Unlimited users & tenants
- Unlimited log retention
EVERYTHING IN ADVANCE, PLUS
- Granular RBAC + SCIM & custom IdP
- Private / fine-tuned AI modelsAI
- Dedicated cloud region & data residency
- Compliance reporting & audit export
- Dedicated detection engineer & TAM
Everything You Need To Detect, Hunt, And Respond
Sigma Rule Converter
Bring your Sigma rules and convert them to native detections in one click — no rewriting, no lock-in.
AI threat hunting
Hunt across petabytes in plain language. SXMonitor's copilot turns a question into a query and surfaces leads.
MITRE ATT&CK coverage
See your defensive coverage mapped to the ATT&CK matrix, with AI-prioritized gaps to close next.
Custom charts & tenants
Build dashboards from any log source and run isolated workspaces per tenant, team, or customer.
Every Capability, Side By Side
| Onboarding & access | ||
| Sign up and access method | Email + SSO | SSO + custom IdP |
| Tenant creation | 1 | Unlimited |
| User seats | 1 | Unlimited |
| Custom roles (RBAC) | – | Granular |
| Detection engineering | ||
| Log ingestion | 1 GB | Unlimited |
| Detection rules | Community | Unlimited |
| Sigma Rule Converter | – | |
| AI detection authoring | – | Private model |
| Threat hunting & intel | ||
| Threat hunting | Manual | AI-assisted |
| Query & save hunts | – | |
| MITRE ATT&CK | Coverage view | + Reporting |
| Threat intelligence feeds | – | |
| Analytics & reporting | ||
| Custom charts & dashboards | Prebuilt | Unlimited |
| Log retention | 14 days | Unlimited |
| Scheduled reports & exports | – | |
| Compliance reporting (SOC2 / ISO) | – | |
| Alerting & routing | ||
| Alert channels | All channels | |
| Criticality-based routing | – | |
| On-call paging (PagerDuty / Opsgenie) | – | |
| Custom webhooks & per-tenant routing | – | |
| AI capabilities | ||
| AI alert triage & noise reduction | – | |
| AI threat-hunting copilot | – | |
| AI MITRE gap recommendations | – | |
| Natural-language chart builder | – | |
| Private / fine-tuned AI models | – | |
| Support & operations | ||
| Support | Community | Dedicated TAM |
| Uptime SLA | – | 99.99% |
| Data residency | US / EU | Dedicated region |
| Dedicated detection engineer | – |
Build Your Plan
Share your requirements, and our team will design a custom plan and pricing — typically within 24 hours.
- Unlimited tenants, users & logs
- Private, fine-tuned AI models
- Dedicated cloud & data residency
- Custom SLAs, MSA, and DPA
- Dedicated engineer & TAM support