Splunk Enterprise Security is a security analytics and operations product used with Splunk Enterprise or Splunk Cloud Platform. It brings SIEM and related investigation capabilities together, with commercial options based on workload, ingest or other selected terms. Underlying platform licensing and capacity remain important.
Splunk Enterprise Security is most compelling when a team can turn rich telemetry into maintained detections and investigations. It is not a simple per-analyst help desk purchase. Scope the platform, ingestion, retention, edition, automation and implementation together, and validate analyst workflows against realistic data volumes.
Starting price: Contact Vendor
Pricing model: Custom Quote
Free trial: No
Compare software based on your team size, industry, features, and requirements.
