Every plan reads unlimited log volume. You pay for the people you protect, billed yearly or monthly in USD.
Team
For companies with 50 to 250 employees and one person on security.
- Up to 6 log sources
- Alerts grouped into cases, noise auto-closed
- 312 managed detections
- Analyst help on weekdays, 8 am to 6 pm
- 90 days of searchable history
Business
Most teams pick thisFor 250 to 2,000 employees. Nights and weekends are covered.
- Unlimited log sources
- A Wardell analyst on call nights and weekends
- 5-minute acknowledge target on every page
- Write your own detections in YAML
- One year of searchable history
- ATT&CK coverage and audit exports
Enterprise
Over 2,000 employees, or a regulated industry.
- Everything in Business
- US or EU data residency
- A named detection engineer
- SSO, SCIM and an audit log API
- Three years of history, 99.9% uptime SLA
Prices in USD. Log volume never changes the price. Every plan starts with a 48-hour threat review of one log source.
What changes between plans, and what never does.
50 to 250
250 to 2,000
2,000 and up
Up to 6
Unlimited
Unlimited
Unlimited
Unlimited
Unlimited
312
312
312 plus custom packs
Read only
Included
Included
Weekdays 8 am to 6 pm
24 hours, 7 days
24 hours, 7 days
Next business hour
5 minutes
5 minutes
90 days
1 year
3 years
CSV
PDF and CSV
PDF, CSV and API
SSO
SSO
SSO and SCIM
US
US
US or EU
Pricing questions
If your situation does not fit a plan, tell us. Most custom quotes come back the same day.
Send us one week of logs. We send back what we found.
Connect one source with a read-only key. Within 48 hours you get a written report of what Wardell would have caught. No contract, and you can disconnect at any time.