This is the Trace Id: 76441b1b5950489db625db2bf7c1fd61
Skip to main content
Microsoft Security

Get up to 5 MB of free Microsoft Sentinel data ingestion daily per user for key security logs.

Learn more
A close-up of a keyboard.
AI-powered SecOps

Microsoft Sentinel pricing

    Predict and stop attacks across clouds and platforms with Microsoft Sentinel. Unify AI, security orchestration and response, behavior analytics, threat intelligence, and a cost-effective data lake with one solution—now enhanced with graph technology for connected insights and rapid, precise response.
    Contact Sales
    OVERVIEW

    Transform your security operations with Microsoft Sentinel

    The Microsoft Sentinel pricing model offers flexible options to balance security coverage and costs to support diverse business use cases. Security data can be ingested into either the analytics or data lake tier.

    Flexible pricing plans

    Data tiers in Microsoft Sentinel offer flexibility, cost-efficiency, and comprehensive coverage.

    Analytics tier

    Supports all log types, with full analytics, alerts, and query capabilities. There are two payment options: Pay-As-You-Go and commitment tiers.
    Learn more

     Data lake tier

    Low-cost, long-term storage of security data used for investigations, querying, and compliance.
    Learn more
    PRICING TABLE

    Explore pricing options

    Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, the currency exchange rate and taxes which may be applicable.1
    Region:
    The 50 GB commitment tier is available in public preview, with promotional pricing starting October 1, 2025, until March 31, 2026. Customers who sign up during this period will lock in promotional pricing until March 31, 2027. Promotional price varies by region and is subject to change.2
    Commitment tiers offer predictable costs and savings up to 52% over Pay-As-You-Go rates by allowing customers to reserve daily data ingestion capacity for the analytics tier, from 100 GB to 50,000 GB. They can be upgraded at any time and downgraded after 31 days. Usage exceeding the commitment tier will be billed at the same discounted rate.3
    Microsoft Sentinel data lake enables security teams to ingest, retain, and analyze massive volumes of security data cost-effectively. With separate compute and storage meters, the data lake allows defenders to flexibly run advanced data insights, machine learning, and forensic investigations from a single point.4 Learn more.
    Microsoft Sentinel solution for SAP® applications help monitor, detect, and respond to sophisticated threats throughout the business logic and application layers for SAP systems hosted on Azure, GCP, AWS, or on-premises. Learn more.
    GET STARTED

    Protect everything

    Make your future more secure. Explore your security options today.
    Contact Sales
    A close-up of a blue and pink graph
    PRICING CALCULATOR

    Azure Pricing calculator

    Calculate your estimated hourly or monthly costs for using Azure. Log in to save cost estimates and view your Azure agreement pricing.
    Try the pricing calculator
    RESOURCES

    Find more detailed information about Microsoft Sentinel

    Product capabilities

    Explore Microsoft Sentinel’s features and capabilities.
    Learn more

    Service-level agreement

    Review the SLA.
    Learn more

    Technical documentation

    Review technical tutorials, videos, and more resources.
    Read documentation

    Frequently asked questions

    • Commitment tiers allow you to reserve a set amount of daily data ingestion capacity for Microsoft Sentinel for a fixed, predictable daily fee. You can upgrade your requested commitment at any time. Your new commitment tier will be effective at the start of the next UTC day. However, the minimum commitment period before you can opt out or reduce your capacity reservation is 31 days.
    • Commitment tiers are applicable at a workspace level and cannot be grouped across workspaces or subscriptions.
    • The analytics tier is ideal for ingesting high-value security data like identity logs, threat intelligence, and endpoint alerts to power real-time detections and investigations. The data lake tier is ideal for high-volume logs like network, firewall, and proxy logs that need long-term retention for forensics and historical analysis.3,4
    • Any Azure services that you use in addition to Microsoft Sentinel, such as Azure Log Analytics, Azure Logic Apps, Azure Machine Learning, and solutions, are charged according to their applicable pricing.
    • Customers who do not use the data lake should check the Azure Monitor pricing page for legacy Search Jobs, Search Queries, and Log Data Restore details. Learn more.
    • On October 1, 2025, Microsoft announced the public preview of a 50 GB commitment tier for Microsoft Sentinel. Customers can sign up for the 50 GB commitment tier from October 1, 2025, through March 31, 2026. Customers purchasing the 50 GB commitment tier during this timeframe will retain the promotional price until March 31, 2027. Promotional pricing varies by region and is available to all Microsoft Sentinel customers throughout the promotion.2
    1. [1]
      Prices are calculated based on US dollars. Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.
    1. [2]
      The promo can be used with existing or new purchases of Microsoft Sentinel. The promo may not be combined with other Microsoft Sentinel discounts.
    2. [3]
      Logs in the Microsoft Sentinel analytics tier are stored within an Azure Monitor Log Analytics workspace. Upon enabling the Microsoft Sentinel data lake, new logs will automatically be stored in the data lake at no additional cost.
    3. [4]
      The data lake tier includes 30 days of free storage during preview. Data processing in the lake is also available at no cost during this time.

    Follow Microsoft Security