Priced by device, never by gigabyte
No ingestion fees and no surprise bills when your log volume grows. Run UTMStack in our cloud or on your own servers, buy from us or from a partner, and get a quote within one business day.
Three ways to run UTMStack
The same platform in each. Pick the one that fits how your team works, and move between them later.
UTMStack Cloud
Subscription, priced by device
A dedicated instance we host on OVHcloud, keep updated and back up for you. Plans for 25 to 500 devices, and custom sizing above that.
- Log management and real-time correlation
- Dashboards and visualization builder
- Real-time threat intelligence
- SOAR response flows and interactive device control
- SOC-AI assistant
- Compliance reports
- File classification
- Support by ticket and chat
- Instructor training and UTMStack certification
Self-hosted license
Enterprise license, priced by device
Run UTMStack Enterprise on your own servers, in your data center or private cloud. Your logs never leave your network, and you add nodes as you grow.
Everything in the open source edition, plus:
- SOC-AI assistant and AI agents
- All 9 compliance frameworks, with PDF reports for auditors
- Single sign-on, custom roles and API keys
- Threat intelligence feeds and dark web monitoring
- macOS agent and federation across servers
- Multi-tenancy for managed service providers
- 24/7 support from the engineers who build UTMStack
Open source
Free under AGPL-3.0
The open source platform under AGPL-3.0, on your own hardware.
- Real-time correlation with 600+ detection rules
- Log Explorer, dashboards and data pipelines
- Alerts, incidents and SOAR response flows
- Windows and Linux agents, syslog and cloud integrations
- CMMC 2.0 and GDPR compliance reports
- Community help on GitHub
Get a quote
Tell us how many devices you monitor and how you want to run UTMStack. We will size it and send a quote.
- 1We reply within one business day.
- 2If you want, a 30-minute call with an engineer to size it.
- 3A written quote, from us or from your partner.
Already working with a UTMStack partner?
Add their name to the message and we will prepare the quote with them.
Reseller, MSP or MSSP? Partners get partner pricing, white-label options and multi-tenant licensing. See the partner program.
Quote request
Pricing questions
What counts as a device?
A device, or data source, is any individual log source: a server, workstation agent, firewall, switch, cloud account or application. A console that collects from many machines, such as an antivirus console or Microsoft 365, counts as one.
Why is there no price list?
UTMStack is sold directly and through partners around the world, and each quote depends on how many devices you monitor, how you want to run it and the support you need. Tell us those three things and we will send a written quote within one business day, directly or through your partner.
Do you charge for log volume?
No. Plans are sized by number of devices, not by gigabytes ingested, so a busy week does not change your bill.
How long is data kept?
Cloud plans keep about one month of logs in fast hot storage and archive older logs to cold storage for a year. Archived logs stay searchable without a restore. Longer retention is available on request.
Can I run UTMStack on my own servers?
Yes. The open source edition is free, and the Enterprise license runs on your own servers, in your data center or private cloud, licensed by device. Ask for a license quote and we will size the servers with you.
What if I have more than 500 devices?
Larger deployments get a custom quote with nodes sized for your volume. Talk to us and we will size it with you.
Can I start on the cloud and move to my own servers later?
Yes. Cloud and self-hosted run the same platform, so you can move in either direction as your needs change.
I already work with a UTMStack partner. Can I buy through them?
Yes. Add the partner’s name when you ask for a quote and we will prepare it with them. Resellers, managed service providers and white-label partners who want to sell UTMStack can join the partner program.
Protect your organization this week, not next quarter
Talk to an engineer today, or start using UTMStack in minutes.
Need to extend your SOC team?
Our analysts work as an extension of your security team: they cover nights and weekends, take alert overflow and back you up on hard incidents. Book a 30-minute call to plan the coverage you need.
Want to try UTMStack?
Click through the live demo in your browser with no sign-up, start a free cloud instance, or install the open source edition on your own server in about 30 minutes.