Pricing
Predictable pricing. No ingestion surprises.
Unlike legacy SIEM, Sigmaward doesn't charge by data volume. You pay per node — and you know the bill at month's end.
Plans
A plan for every stage of your operation.
Team
For the in-house blue team.
Custom
Sigma detection engine + 1,200+ rules
Case and observable management
SOAR automation with playbooks
Dashboards and reporting
SSO via Keycloak and RBAC
MSSP
For those who deliver security as a service.
Custom
Everything in Team, multi-tenant
Full per-client isolation (RLS)
Consolidated cross-tenant portfolio
Per-client provisioning and realm
Usage- and node-based billing
Enterprise
Self-hosted, in your environment.
Custom
Self-hosted deploy (Helm/Kubernetes)
Internal TLS and production hardening
Tamper-evident audit trail
Corporate SSO and granular RBAC
Dedicated support and SLA
No charge by ingestion volume. Horizontal scale per node, with predictable pricing.
Questions
Frequently asked.
Do you charge by data volume?
No. Pricing is per node — event volume doesn't change your bill.
Can I run self-hosted?
Yes. The Enterprise plan runs in your environment via Helm/Kubernetes, with the same features.
How does it work for MSSPs?
You operate multiple isolated clients in one pane and bill by usage and by node.
Is there a trial environment?
Yes. Talk to our team for a guided demo and a trial environment.
See Sigmaward in action.
A guided tour of the platform — detection, cases and automation in minutes.