Plans & Pricing
Every plan includes the full Sentendra platform — case management, alert triage, observables, reporting, and integrations. Paid plans add Sentendra-hosted AI analysis on dedicated GPU infrastructure. Free Starter has AI off by default; you can still enable AI on Starter by bringing your own OpenAI or Anthropic API key — no Sentendra-provided model.
| Feature | Starter Free Discover Sentendra. Single-org SOC. No AI. Start free | RecommendedTeam From $499/mo For SOC teams running 24/7 incident response. Start trial | Enterprise Custom For SOCs and MSSPs at scale. SSO, dedicated single-tenant deployment, BYO LLM. Contact sales |
|---|---|---|---|
| Limits | |||
| Seats included | 3 | 15 | 100 |
| Managed customers | 1 | 5 | Unlimited |
| Alerts / month | 5,000 | 75,000 | 1,000,000 |
| AI analyses / month | 0 | 5,000 | 100,000 |
| Concurrent open cases | 25 | 500 | 10,000 |
| SIEM connections | 1 | 5 | Unlimited |
| Sandbox detonations / month | 0 | 50 | Unlimited |
| API requests / minute | 60 | 600 | 6,000 |
| Detection & response | |||
| SIEM connectors | ✓ | ✓ | ✓ |
| SIEM backfill | — | ✓ | ✓ |
| Ingestion monitoring | — | ✓ | ✓ |
| Threat map | — | ✓ | ✓ |
| Threat intelligence | — | ✓ | ✓ |
| Advanced search | — | ✓ | ✓ |
| Advanced cases | — | ✓ | ✓ |
| Closure suggestions | — | ✓ | ✓ |
| Intelligence graph | — | ✓ | ✓ |
| Security devices | — | — | ✓ |
| Detection as code | — | — | ✓ |
| Sandbox | — | ✓ | ✓ |
| AI | |||
| AI features | — | ✓ | ✓ |
| AI operations | — | — | ✓ |
| AI training | — | — | ✓ |
| AI cost tracking | — | — | ✓ |
| Bring-your-own LLM | — | — | ✓ |
| Analytics & reporting | |||
| Advanced analytics | — | ✓ | ✓ |
| Advanced reporting | — | ✓ | ✓ |
| Reports v2 | — | ✓ | ✓ |
| Audit log | — | ✓ | ✓ |
| Audit log export | — | — | ✓ |
| Collaboration & workflow | |||
| Collaboration | — | ✓ | ✓ |
| Playbooks | — | ✓ | ✓ |
| Integrations | — | ✓ | ✓ |
| n8n log ingest | — | ✓ | ✓ |
| Multi-customer | — | ✓ | ✓ |
| ITSM connectors | — | — | ✓ |
| Enterprise & compliance | |||
| SSO | — | — | ✓ |
Every plan includes: Two-factor authentication · Activity timeline · Alerts · Analytics · Cases · CVE browser · Notifications · Observables · Search · Settings · SIEM connectors · Users
About AI & your data. Starter has AI off by default — no model runs, no data leaves the platform for analysis. Adding AI on Starter requires your own OpenAI or Anthropic key (you pay them directly). On Team and Enterprise we run a GPU-hosted model on infrastructure we control, so your alerts, hostnames, and observables never reach a third-party LLM. You can also choose BYO key on paid plans if you prefer your own provider under your DPA. The AI provider is a per-tenant setting and can be changed at any time.