Start free. Scale when you do.
The Community core is free forever. Pay when you need in-flight detection rules, a supported commercial posture, MSSP multi-tenancy, or Enterprise scale.
Security engineers and single-team SOCs who want a real, self-hosted pipeline without a sales call.
Get started free- Full ingestion from any source: Wazuh, Defender, CrowdStrike, Sophos, Entra ID, Okta, CloudTrail, FortiGate, Windows Event Log, a native syslog receiver and custom JSON push
- Vendor-neutral routing to 17 destinations: Splunk HEC, Elastic, Sentinel, Google SecOps, ClickHouse, S3, Kafka, LogScale, and more
- In-stream enrichment: GeoIP/ASN, your own tables, VirusTotal, OpenCTI, TAXII
- Volume reduction before the meter: drop raw, drop nulls, keep-only, sample, suppress, with bytes avoided metered by cause
- OCSF-native normalization, capture journal per event, replayable dead-letter queue
- SSO/OIDC, RBAC and KMS/Vault secrets, included free; 52-tool MCP server (Apache-2.0)
- OTel-native observability; self-host on Docker Compose or Kubernetes
A single organization that's running SEGARK Pipeline in production and wants a supported, commercial posture.
Start with Starter- Everything in Community
- In-flight detection rules: author them, preview against real captured samples, sliding windows per key, and the built-in IOC rule pack
- Commercial license (no AGPL copyleft obligations)
- Supported, single-tenant production posture with defined SLAs
- Priority bug fixes and security patches
- Onboarding assistance and version-upgrade guidance
- Email/ticket support
Managed security providers and resellers running many customers from one platform.
Talk to sales- Everything in Starter
- Multi-tenant hierarchy with hard cross-tenant isolation
- Reseller / partner management and per-org administration
- Per-tenant routing, detection, quotas, and reporting
- Scoped org-admin roles (delegated tenant management)
- Onboard new customer orgs fast, without new deployments
- MSSP-grade support and onboarding
Large security orgs and regulated environments needing federated search, compliance-grade audit, fleet scale, and air-gapped operation.
Talk to sales- Everything in MSSP
- Federated cross-source, async search across all tenants and sources
- Cross-tenant audit & compliance reporting
- HA / fleet operations at scale
- Offline-verifiable, air-gapped-friendly licensing
- Data residency / data-control controls
- Premium support with named contacts and priority response
Need the full comparison? Talk to sales
Answers before you ask
Stop paying to store noise.
Spin up the free Community core in minutes. No sales call, no credit card. Upgrade to Starter, MSSP, or Enterprise whenever you're ready.