--- title: Are you paying too much for your SIEM? description: Are you overpaying for your SIEM? Discover the true cost of ownership and learn how to save money while increasing protection. image: https://blog.alcit.com/hubfs/iStock-1339249851-med.jpg --- [![alcit menu](https://blog.alcit.com/hs-fs/hubfs/a%20(1).png?width=142&height=42&name=a%20(1).png) ](https://www.alcit.com) [ How we can help ](https://www.alcit.com/how-we-can-help) [ Service Bundles ](https://www.alcit.com/service-bundles) [ Where we focus ](https://www.alcit.com/where-we-focus) [ Who we work with ](https://www.alcit.com/who-we-work-with) [ Why ALCiT ](https://www.alcit.com/why-alcit) [ Pricing ](https://www.alcit.com/pricing) [ Get Started ](https://www.alcit.com/contact) [ Get Started ](https://www.alcit.com/contact) # Are you paying too much for your SIEM? Published on: 10 January 2023 - *![](https://blog.alcit.com/hubfs/user.svg)* By Loïc Calvez ![Are you paying too much for your SIEM?](https://blog.alcit.com/hubfs/iStock-1339249851-med.jpg) *![folder icon](https://blog.alcit.com/hubfs/folder.svg)* POSTED IN [ Modern Business ](https://blog.alcit.com/tag/modern-business) [ Technology ](https://blog.alcit.com/tag/technology) SIEM can make the difference between stopping an attacker while they get started vs after they've setup their entire plan, but how much should it cost?   First let’s establish the full cost of ownership for SIEM (if you need a refresher on what SIEM is, look [here](https://blog.alcit.com/a-complete-guide-on-security-information-and-event-management)). - Cost 1: The tool/product/service required to ingest and analyze ALL your security related logs. (If you are not ingesting all your logs because your current tools charges too much per EPS, just skip to the conclusion (you’re paying too much for not enough protection)). - Cost 2: The effort to review ALL the alerts that are identified by SIEM. (If you are not reviewing all the alerts because there is too much noise with your current SIEM, just skip to the conclusion (you’re not getting the protection you should have)). - Cost 3: The effort to take action on all the alerts that require you to do something (this is not a direct cost of SIEM, but what’s the point of getting alerts if you ignore them?). - Cost 4: The cost of at least one Senior Cybersecurity person to prioritize efforts and make decisions. - Cost 5: The effort of doing all this 24/7. (Criminals know you like your weekends, and we see spike in attacks on Friday nights, especially before long weekends). So, if you add the cost of all the above, you now have a picture of your Total Cost of Ownership (TCO) for SIEM. Other assumptions: - Your current SIEM tool includes all the features you need (if not, add the cost of those missing tools/features). - You have a proper Endpoint Detection and Response (EDR) tool that can perform containment actions to stop the spread if needed  (if not, add the cost of that tool, we like SentinelOne, but there are other good ones out there). - You have some Remote Management and Monitoring (RMM) tool you can leverage to rapidly push configs/fixes/patches to respond to a cybersecurity incident (highly recommend since speed of response is a big factor). - You have properly configured firewalls that block known attack patterns via Intrusion Detection/Prevention (IDS/IPS) including for encrypted traffic (DPI SSL) and upload all their logs into SIEM for correlation (if not, you are partially blind). If you are doing all the above and have all the tools suggested, you now calculate you TCO! (if you are not doing all that; is it because you don’t think you need it, or because you think you can’t afford it?) For a smaller organization (10-50 people) we can usually do all the above (including the cost of tools), for less than the cost of a Senior Cybersecurity person. For medium organization (50-300), usually for less than the cost of two Senior IT resources. Interested in learning how we can save you money while increasing your overall protection? Book a free [30 minutes consultation](https://talk.alcit.com/meetings/mariano-d/services-review) with one of our cybersecurity experts.   [![Get the Cybersecurity Risk Assessment Checklist](https://no-cache.hubspot.com/cta/default/9320596/c4cdb85b-f3ce-4d83-a056-31d8f45a397e.png)](https://cta-redirect.hubspot.com/cta/redirect/9320596/c4cdb85b-f3ce-4d83-a056-31d8f45a397e) ### Subscribe and Get The Latest News ### Related Posts ### [Protecting CCTV systems](https://blog.alcit.com/protecting-cctv-systems) Closed Caption Television (CCTV), or more commonly called surveillance cameras are complicated systems to deal with from an IT perspective. On one side they are “secure” systems that contain... [Read More](https://blog.alcit.com/protecting-cctv-systems) ### [Your Mess for Less](https://blog.alcit.com/your-mess-for-less) You may not be familiar with that saying, but that it is the standard industry term for the support model that many (most?) MSPs provide. [Read More](https://blog.alcit.com/your-mess-for-less) ### [ALCiT Achieves SOC 2 Certification: A Testament to Our Commitment to Security](https://blog.alcit.com/alcit-achieves-soc-2-certification-a-testament-to-our-commitment-to-security) We are thrilled to announce that ALCiT has successfully achieved SOC 2 certification, a significant milestone that underscores our dedication to maintaining the highest Cybersecurity and data... [Read More](https://blog.alcit.com/alcit-achieves-soc-2-certification-a-testament-to-our-commitment-to-security) [![a (2)](https://blog.alcit.com/hs-fs/hubfs/a%20(2).png?width=142&height=42&name=a%20(2).png) ](https://www.alcit.com/) ## Got Questions? [ talk@alcit.com ](mailto:talk@alcit.com) [ support@alcit.com ](mailto:support@alcit.com) ## Company [ How we can help ](https://www.alcit.com/how-we-can-help) [ Pre-configured solutions ](https://www.alcit.com/pre-configured-solutions) [ Where we focus ](https://www.alcit.com/where-we-focus) [ Who we work with ](https://www.alcit.com/who-we-work-with) [ Why ALCiT ](https://www.alcit.com/why-alcit) ## Pages [ Blogs ](https://blog.alcit.com) [ Webinar Hub ](https://www.alcit.com/webinars-hub) [ Service Status ](https://status.alcit.com/) [ Remote Session ](https://remote.alcit.com/) [ Privacy ](https://www.alcit.com/privacy) [ Legal / Terms & Conditions ](https://www.alcit.com/legal) ## Contact Us ### North American Sales [+1 877.252.4804](tel:+1%20877.252.4804) ### Canada: [+1.647.417.0900](tel:+1.647.417.0900) 5-2475 Skymark ave. Mississauga, ON, L4W 4Y6 ### United States: [+1.302.467.3210](tel:+1.302467.3210) 16192 Coastal Highway Lewes, DE 19958 ## Follow us [![logo_LinkedIn](https://blog.alcit.com/hs-fs/hubfs/logo_LinkedIn.png?width=200&height=200&name=logo_LinkedIn.png) ](https://www.linkedin.com/company/alcit) [![logo_Facebook](https://blog.alcit.com/hs-fs/hubfs/logo_Facebook.png?width=200&height=200&name=logo_Facebook.png) ](https://www.facebook.com/alcitcom) [![logo_Instagram](https://blog.alcit.com/hs-fs/hubfs/logo_Instagram.png?width=200&height=200&name=logo_Instagram.png) ](https://www.instagram.com/alcit_com) [![logo_X](https://blog.alcit.com/hs-fs/hubfs/logo_X.png?width=200&height=200&name=logo_X.png) ](https://twitter.com/alcit) [![logo_Thread](https://blog.alcit.com/hs-fs/hubfs/logo_Thread.png?width=200&height=200&name=logo_Thread.png) ](https://www.threads.net/@alcit_com) [![logo_Bluesky](https://blog.alcit.com/hs-fs/hubfs/logo_Bluesky.png?width=200&height=200&name=logo_Bluesky.png) ](https://bsky.app/profile/alcitdotcom.bsky.social) ## Recent Blog Post [![AI is speeding up exploitation — and that makes patching more urgent](https://blog.alcit.com/hs-fs/hubfs/Blog%20Header%20April%202026.png?width=80&height=80&name=Blog%20Header%20April%202026.png) ](https://blog.alcit.com/ai-is-speeding-up-exploitation-and-that-makes-patching-more-urgent) [AI is speeding up exploitation — and that makes patching more urgent](https://blog.alcit.com/ai-is-speeding-up-exploitation-and-that-makes-patching-more-urgent) Earlier in April, Anthropic published research about Claude Mythos ... [![Not a checkbox anymore | Welcome to the Era of Human Risk Management](https://blog.alcit.com/hs-fs/hubfs/Blog%20Human%20risk%20Header.png?width=80&height=80&name=Blog%20Human%20risk%20Header.png) ](https://blog.alcit.com/not-a-checkbox-anymore-welcome-to-the-era-of-human-risk-management) [Not a checkbox anymore | Welcome to the Era of Human Risk Management](https://blog.alcit.com/not-a-checkbox-anymore-welcome-to-the-era-of-human-risk-management) When Canadian small and medium-sized businesses (SMBs) talk about ... © Copyright 2025 ALCiT | All Rights Reserved