Positioning credible competitive threats with established players like Splunk and New Relic is becoming increasingly important, although we recognize this may not always be feasible given the high switching costs involved. Humio’s standard of only offering unlimited capacity deals is a good example. These newer market entrants and their customer engagement tactics are causing a stir in the market. Meanwhile, names like Humio (now acquired) and Devo that rarely came across our analysts’ desks in 2020 have become noticeably more frequent. Emergence of New Competitorsīoth Splunk and New Relic have been dominant players in the SIEM category for years, but competitive dynamics are starting to reshape the market. Competition from vendors like LogRhythm, Datadog, and Dynatrace remains strong. When it comes to Splunk enterprise pricing, NPI recommends clients take a hard stance at staying on per GB metrics for the time being as vCPU/SVC metrics appear to be increasing client fee averages noticeably compared to traditional licensing.

New Relic appears to be trying similar moves, but NPI hasn’t seen as much of a trend established outside the norm as compared to Splunk. These new pricing metrics are likely to give more of an advantage to the vendor in the long run when compared to per-GB. Many of the major players in this space like Splunk and New Relic had started offering new licensing alternatives to traditional per-GB capacity pricing in 2020. As NPI analyzes deals for our clients, we are seeing that Splunk has started making a more concentrated shift away from per GB price models.įor example, Splunk’s newer vCPU (on-premise) and Splunk Virtual Core or SVC (cloud) have seemingly become the vendor’s default pricing standard. Hard Shifts in Splunk Enterprise Pricing Models Inspire Similar Behavior from Competition The market is likely in for even more changes and volatility in the short term. This is especially evident with CrowdStrike’s $390M+ acquisition of Humio, a vendor that only recently entered the enterprise scene. We are starting to see competitors catch up to the leading market titans – a point I dig into further below – and the resultant shifts in vendor behavior are worth taking notice of. It’s important to point out just how white-hot the SIEM market is right now. NPI is noticing certain behaviors among industry leaders in the market that rise above the noise. The confluence of these factors (and others) have prompted a shift in the SIEM (security information and event management) landscape – ranging from changes to Splunk enterprise pricing to the emergence of new players and beyond. At the same time, many enterprises are experiencing spikes in IT security-related incidents. Last year, we saw many vendors experimenting with newer pricing models to meet shifting customer demands.

Splunk enterprise security pricing