Fixed annual licensing anchored to your deployment, not to your data volume. Unlimited ingestion and unlimited endpoints on every tier, including SME.
We publish our prices because the alternative is a category where the quote depends on how much you already spend. What you see below is what you pay. There is no ingestion meter, no per-endpoint multiplier, and no egress fee for taking your own data back.
Three ways to buy, depending on whether you are an SME, an enterprise, or a managed service provider reselling to your own clients.
Organisations under 250 employees
£6,000 per yearUnrestricted scale
£45,000 per yearPriced per technician, not per endpoint
£150 – £225 per technician, per monthSME pricing is gated strictly to organisations with fewer than 250 employees. Data ingestion and endpoint volumes remain completely unlimited across all tiers.
Every platform is licensed independently and runs standalone. Most organisations start with one and add the rest as they retire the SaaS contracts each platform replaces. All prices are annual.
| Platform | SME | Enterprise | Replaces |
|---|---|---|---|
| Umbra SIEM | £6,000 | £45,000 | Splunk — variable, per GB |
| UmbraShield | £5,000 | £32,000 | Snyk — per developer |
| SinonAlert | £4,000 | £28,000 | Elastic Security |
| SinonPosture | £3,500 | £24,000 | Wiz — per workload |
| UmbraRisk | £3,000 | £18,000 | IriusRisk |
| Platform | SME | Enterprise | Replaces |
|---|---|---|---|
| SinonAuth | £3,500 | £20,000 | Okta / Entra — per user |
| SinonKeystone | £3,000 | £16,000 | Ivanti / Automox |
| SinonFirewall | £2,500 | £15,000 | Fortinet — subscription plus hardware |
| SinonVPN | £2,000 | £12,000 | Tailscale Enterprise |
| SinonSentinel | £150 – £225 per technician / month | ConnectWise — per endpoint | |
| Platform | SME | Enterprise | Replaces |
|---|---|---|---|
| SinonStore | £3,000 | £22,000 | AWS S3 — per GB plus egress |
| SinonForge | £2,500 | £14,000 | GitHub Enterprise |
| VeritasFeed | £2,000 | £10,000 | Recorded Future |
| SinonMail | £1,500 | £9,500 | Microsoft 365 |
| SecureMinds AI | £1,200 | £7,500 | KnowBe4 |
Prices are annual list prices excluding VAT. Pounds sterling is the contracting currency; euro and US dollar figures are converted at a fixed published rate of £1 = €1.16 = $1.27 and are reviewed periodically, so the rate on the day of contract is confirmed in writing before signature. Multi-platform and multi-year agreements are quoted individually — contact us for a consolidated figure.
Metered SIEM pricing puts your security posture in direct competition with your budget. When visibility carries a per-gigabyte price, the cheapest decision is always to log less — which is precisely the decision NIS2 Article 21 does not forgive.
A like-for-like comparison across a representative enterprise estate. The gap is not a discount. It is the absence of the ingestion meter, the egress fee, and the third-party risk-management overhead that a concentrated cloud dependency creates.
| Component | Legacy Cloud SaaS | SinonTech |
|---|---|---|
| Software licensing | $180,000 Base | $61,500 Enterprise flat |
| Ingestion & storage | $340,000+ Compounding | $0 Unlimited ingestion |
| Hardware compute | $0 Hidden in vendor margin | $35,000 Depreciated CapEx |
| Third-party vendor GRC | $65,000 TPRM overhead | $15,000 Audit simplified |
| Five-year estimated TCO | $1,125,000+ | $357,500 |
Total Savings
~$767,500A 68% reduction in five-year SecOps spend
Based on a representative enterprise scenario of 2,500 endpoints ingesting 1.5 TB per day. Figures are indicative and denominated in US dollars to match published cloud SIEM list pricing. We model your own estate during the architecture review.
Support is part of the licence, not a separate line item negotiated after signature.
One-hour critical SLA.
Direct SOC-to-SOC communication with no automated chat bots. You bypass Tier 1 entirely and speak to the engineers who build the platform.
VeritasFeed integration.
Live automated updates to Sigma detection rules, IOCs, and CVE databases, delivered securely to your instance without opening an outbound telemetry channel.
Technical Account Manager.
Assigned architecture support for scaling decisions, compliance audit reporting, and custom deployment topologies across your estate.
Licensing does not change with deployment model. Where the software runs is an operational choice, not a pricing lever.
Deploy on bare metal, Kubernetes, or your own virtualisation estate. Air-gap capable, with no WAN access required for the platform to function.
We run it on dedicated single-tenant bare metal in Tier-3 EU data centres. You hold the encryption keys and retain standard PostgreSQL schema access.
Deploy into your existing EU or UK sovereign cloud provider. No SinonTech-side telemetry channel exists in any deployment mode.
Data residency and data sovereignty are different things. Telemetry held in the EU region of a US-owned vendor remains within reach of the US CLOUD Act. In every SinonTech deployment model, including Sinon-Hosted, there is no vendor-side data path to compel. The detail is on our compliance page.
No. Every SinonTech licence includes unlimited data ingestion. The price is anchored to the deployment, not to volume, so your bill does not move when your log estate grows. Cloud SIEM platforms typically charge between $2.50 and $5.00 per gigabyte per day, which is why security teams under those contracts routinely drop firewall and DNS logs to stay inside budget.
No. Endpoint, user, and developer counts are unlimited on every tier. The only per-seat model in the range is SinonSentinel for managed service providers, which is priced per technician rather than per managed endpoint — so onboarding a new client expands your margin instead of your licence cost.
SME pricing is gated strictly to organisations with fewer than 250 employees. It is a headcount gate, not a usage gate: data ingestion and endpoint volumes remain completely unlimited on the SME tier, exactly as they are on Enterprise.
A 24/7/365 support commitment with a one-hour critical response SLA and direct SOC-to-SOC contact with engineers; VeritasFeed threat intelligence delivering live Sigma rule, IOC, and CVE updates; and a dedicated Technical Account Manager for scaling, audit reporting, and custom deployment topologies.
No. There are no ingestion charges, no storage tiering charges, and no egress fees for exporting your own data. The platforms are built on standard PostgreSQL and Elasticsearch schemas, so an export is a database dump rather than a billable event. Hardware runs on commodity enterprise kit that you buy at market price with no vendor markup.
Yes. Every platform is licensed independently at the published price and runs standalone. Most organisations start with Umbra SIEM or SinonSentinel and add adjacent platforms as they retire the SaaS contracts those platforms replace.
They are priced separately. Managed services use three models — By User, By Endpoint, or Custom — and are scoped to your organisation during the initial consultation. See managed services for the detail.
Yes. The 14-day sovereignty validation pilot provisions an isolated instance on your own cluster and ingests live telemetry from a bounded network segment, so you measure throughput, query speed, and storage footprint against your real estate rather than a vendor benchmark.
Tell us the size of your estate and we will put a fixed, multi-year figure against it, with the migration path costed alongside.
Phone: 0141 536 0433
Email: info@sinontech.co.uk