Software · pricing
Microsoft Sentinel pricing
Microsoft Sentinel publishes 3 tiers. Below is each one, what it adds over the tier beneath it, and where the ladder stops being worth climbing for most people.
- Entry price
- Free, then $2.46/day
- Model
- Usage-based
- Tiers
- 3
- Free tier
- Yes
Microsoft Sentinel plans, side by side
Every published tier in ascending order of price, with the number of features each one lists. An absence here means the record does not itemise it, not that the tier lacks it.
| Plan | Price | Features listed | Step up from the tier below |
|---|---|---|---|
| Commitment Tiers | Free | 3 | Entry tier |
| Microsoft 365 E5 | Free | 2 | +$0/month, 2 more features |
| Pay-As-You-Go | $2.46/day | 3 | +$2.46/day, 3 more features |
What each tier adds
The set difference between each tier's feature list and the one beneath it. Where a tier lists nothing new, the vendor has either stopped repeating the inherited list or the tier raises limits rather than adding capability, the record does not distinguish the two, so this page does not either.
Commitment Tiers
FreeThe entry tier. It covers 100gb to 50tb tiers, up to 65% discount, predictable billing.
Microsoft 365 E5
FreeOver Commitment Tiers, this tier adds:
- Free data ingestion for M365 logs
- Bundled with E5 license
Pay-As-You-Go
$2.46/dayOver Microsoft 365 E5, this tier adds:
- Per GB ingested
- 90-day retention
- First 31 days free for new workspaces
Where Microsoft Sentinel stops being free
Commitment Tiers, Free
- 100GB to 50TB tiers
- Up to 65% discount
- Predictable billing
Pay-As-You-Go, $2.46/day
The first thing you pay for:
- Per GB ingested
- 90-day retention
- First 31 days free for new workspaces
What the product covers
The full Microsoft Sentinel feature record, grouped as the catalogue groups it. This is the product as a whole; the record does not map every feature onto a specific tier.
Core
- AI-powered analytics
- Fusion detection
- UEBA
- Automated response playbooks
- Threat intelligence
- Hunting queries
- Workbooks
- Incident management
Integrations
- Microsoft 365
- Azure services
- AWS
- Google Cloud
- CrowdStrike
- Palo Alto
- Cisco
- ServiceNow
- 200+ connectors
Security
- SOC2
- ISO 27001
- FedRAMP
- HIPAA
- GDPR
- PCI-DSS
Deployment
- Cloud deployment
Platform
- Web support
- Api support
Localization
- English language support
- German language support
- French language support
- Spanish language support
- Italian language support
- Portuguese language support
- Japanese language support
- Chinese language support
- Korean language support
People bring Microsoft Sentinel in for cloud native siem collecting security logs across azure, microsoft 365 and third party sources, threat detection, hunting and incident investigation over pooled log data, automating incident response with playbooks built on logic apps. If that is not the job you are buying for, the alternatives to Microsoft Sentinel are worth a look before you commit to a tier.
Before you pay for Microsoft Sentinel
Three things this page cannot tell you, and all three change the bill. The record carries a price and a billing period but not the unit - per-seat and flat-rate pricing are indistinguishable in this data, so a five-person team may be looking at five times the figure above. It carries no annual rate, so any discount for paying yearly is not something this page can quote. And it carries no trial length.
What it can tell you is the shape of the ladder: 3 tiers between Free and $2.46/day, with the jump itemised above. Because there is a free tier, the cheapest way to answer the rest is to use it before paying anything.
Microsoft Sentinel runs on web, api, and is published by Microsoft Corporation of Redmond, Washington, USA. The full record is on the Microsoft Sentinel review.
Microsoft Sentinel pricing questions
- How much does Microsoft Sentinel cost?
- Microsoft Sentinel publishes 3 tiers, from Free for Commitment Tiers up to $2.46/day for Pay-As-You-Go. The entry tier costs nothing.
- Does Microsoft Sentinel have a free plan?
- Yes. The Commitment Tiers tier costs nothing and covers 100gb to 50tb tiers, up to 65% discount, predictable billing. Paying starts at $2.46/day for Pay-As-You-Go.
- What is the difference between Commitment Tiers and Microsoft 365 E5 on Microsoft Sentinel?
- Microsoft 365 E5 costs Free against Free, and adds free data ingestion for m365 logs, bundled with e5 license.
- What am I actually paying for with Microsoft Sentinel?
- The record lists 35 features across 6 areas: core, integrations, security, deployment, platform, localization. In practice it is brought in for cloud native siem collecting security logs across azure, microsoft 365 and third party sources, threat detection, hunting and incident investigation over pooled log data, automating incident response with playbooks built on logic apps.
- Does Microsoft Sentinel charge per user?
- The record carries a price and a billing period for each of its 3 tiers, but not the unit that price is charged in. Per-seat and flat-rate billing look identical in this data, so check the vendor's page before budgeting for a team.
- Are these Microsoft Sentinel prices current?
- They are what the catalogue entry holds, refreshed when the entry is. Vendors change pricing without notice and nobody at Softwr re-verifies each tier by hand, so treat this as a structured summary and the vendor's own pricing page as the authority.
- What should I compare Microsoft Sentinel against before paying?
- Nothing else in this directory is filed close enough to Microsoft Sentinel to make a useful price comparison.