Gravwell Pricing

Consumption-based pricing is outdated and unpredictable

Our infrastructure based pricing means clear total cost of ownership and absolutely no surprises. 
Whether your data needs are straightforward logs or advanced root cause analysis, there’s a Gravwell plan for you.
 

Community

Edition

Pro

Edition

Enterprise

Edition

Enterprise Cloud

Edition

Free

limited to one indexer

$24,000 per indexer

per year

$48,000 per indexer

per year and for example estimated usage of 1.2 TB / day might require 4 nodes for $192,000

$48,000+

per year
Download a License Start a Conversation Start a Conversation

Start a Conversation
Self hosted on-prem or in your private cloud Self hosted on-prem or in your private cloud Self hosted on-prem or in your private cloud Hosted by Gravwell in the Public Cloud (AWS, GCP, Azure, Oracle)
Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Symon and many more) Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Symon and many more) Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Symon and many more) Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Symon and many more)
13.9 GB/day data ingestion Unlimited Data ingestion Unlimited Data ingestion Unlimited Data ingestion
Unlimited ingester endpoints Unlimited ingester endpoints Unlimited ingester endpoints Unlimited ingester endpoints
Unlimited retention Unlimited retention Unlimited retention Unlimited retention
Unlimited search count Unlimited search count Unlimited search count Unlimited search count
Unlimited user seats Unlimited user seats Unlimited user seats Unlimited user seats
Binary data support Binary data support Binary data support Binary data support
Single Sign-on Single Sign-on Single Sign-on Single Sign-on
Tiered storage Tiered storage Tiered storage Tiered storage
Cloud Archive (“Frozen”) Storage Cloud Archive (“Frozen”) Storage Cloud Archive (“Frozen”) Storage Cloud Archive (“Frozen”) Storage
Configurable data retention and automatic age-out Configurable data retention and automatic age-out Configurable data retention and automatic age-out Configurable data retention and automatic age-out
Search scheduler agent and built-in orchestration Search scheduler agent and built-in orchestration Search scheduler agent and built-in orchestration Search scheduler agent and built-in orchestration
Scriptable/custom search Scriptable/custom search Scriptable/custom search Scriptable/custom search
Online (“Hot”) replication Online (“Hot”) replication Online (“Hot”) replication Online (“Hot”) replication
Region-aware redundancy Region-aware redundancy Region-aware redundancy Region-aware redundancy
Enhanced Multi-tenancy Permissions Enhanced Multi-tenancy Permissions Enhanced Multi-tenancy Permissions Enhanced Multi-tenancy Permissions
Distributed web frontends Distributed web frontends Distributed web frontends Distributed web frontends
High availability search High availability search High availability search High availability search
Unlimited automations Unlimited automations Unlimited automations Unlimited automations
       

Community

Edition

Pro

Edition

Enterprise

Edition

Enterprise Cloud

Edition

Download a License

Start a Conversation

Start a Conversation

Start a Conversation
  or

Pay with a Credit Card Now

    
Perfect for small commercial projects Great for organizations with single business units that need to collect events, search, and automate Optimized for Critical Environments and Enterprise SOCs. Perfect for those looking to concentrate on data analysis and outsource the hosting and maintenance of a Gravwell Cluster

Gravwell Support

At Gravwell our customers’ success is our top priority.

We understand that even our sharpest customer will need a little help, which is why our support model provides the tools, support, and service level agreements needed to succeed. Sometimes customers want a little more, which is why we also offer our professional and premium support packages. 
 

Basic

Professional

Premium
Severity 1
 8 Hours Business Hours 3 Hour initial response. daily updates. (24/7/365) 1 Hour initial response. updates every 3 hours. (24/7/365)
Severity 2
 2 Days Business Hours 12 Hours Business Hours 8 Hours Business Hours
Severity 3
 3 Days Business Days 2 Days Business Hours 12 Hours Business Hours
Severity 4
 4 Days Business Days 3 Days Business days 2 Days Business Days
Knowledge Base, Docs, & Forum
 Yes Yes Yes
Email Support
 Yes Yes Yes
Scheduled Phone / Video Support
 No Yes Yes
Onboarding with UI training
 Available Yes Yes
Designated Business Account
 No Yes Yes
Technical Training Course work
 No Available Yes
Technical Training
virtual or on site
 No No Available
Priority Case Routing
 No No Yes
Designated Technical
Account Manager
 No Available 4 hours monthly default, more hours available
Professional Services
 No Available Available
Named Contacts
 0 1 Account Manager 1 Account Manager and 1 Technical Expert

 

 

Let's Talk!

Our platform is built for data-intensive scenarios and can scale to handle TBs of events per day. We offer a variety of features and integrations to help you get the most out of your data. And our team is always available to help you get started. Fill out the form at the right to start a conversation.

Frequently Asked Questions

What is a node?

A Gravwell node is an indexer; the Gravwell indexer is responsible for accepting ingested data, indexing it, and storing the data in a storage medium. Webservers, ingesters, and other ancillary components are not counted as nodes for the purpose of licensing.

What is a cluster?

Multiple Gravwell nodes (or Indexers) can be combined to create a single Gravwell Cluster.

What is a webserver?

The webserver acts as the focusing point for all searches and provides an interactive interface into Gravwell.

Do I need multiple webservers?

Most likely, no. Multiple webservers make your cluster more complex. In general, we recommend setting up a single webserver, then adding more only if the load is too high in use.

What is an ingester?

Ingesters gather incoming data, package it into Gravwell entries, and ship it to Gravwell indexers for storage.

What is a dashboard?

Dashboards are aggregated views of searches that provide a view into multiple aspects of the data at once.

What are kits?

Gravwell Kits are pre-packaged tool sets for analyzing a particular data source. Kits exist to analyze Netflow v5, IPFIX, CoreDNS, and more. They're a great way to get started with your data, a jumping-off place to building your own analysis.

What is Community Edition?

Gravwell Community Edition is free for private or commercial usage up to 13.9 GB/day of data ingestion. In addition, our Community actively supports Gravwell on our discord server.

What are the hardware requirements for Gravwell Community Edition?

We strongly recommend at least 4GB of RAM and 2 CPU cores to run Gravwell Community Edition; this should be sufficient up to the CE ingest limit. If you have a paid license, you should scale up your hardware as your daily data ingest increases. In general, we recommend the following rule of thumb:

What are the hardware requirements for Gravwell Pro Edition or Gravwell Enterprise Edition?

You should scale up your hardware as your daily data ingest increases. In general, we recommend the following rule of thumb: One CPU core per 30 GB/day ingest. 1 GB of RAM per 6 GB/day ingest.

Can I import old data?

Yes you can. Check out the migration documents if you have existing data you want to import. https://docs.gravwell.io/#!ingesters/migrate/migrate.md

Are their ingest limits?

Gravwell Community Edition is the ONLY time Gravwell will restrict data ingestion rates. The rate limit is set to 13.9 GB/day of data ingestion, roughly equal to one astronomical unit.

How do I join the Discord Server?

Open invitations are available at: https://discord.com/invite/gravwell

Where do I get support for Gravwell Community Edition?

Join our Discord server and ask any questions you have! https://discord.com/invite/gravwell

How is Gravwell installed?

Gravwell is distributed in four ways: via a Docker container, via a distribution-agnostic self-extracting installer, via a Debian package repository, and via a Redhat package repository.

I have a question that is not listed.

Great! Send us a message, and we will get back to you with an answer. https://www.gravwell.io/contact-us

I want a t-shirt or stickers!

Great! Email marketing@gravwell.io
Gravwell is an enterprise data fusion platform that enables security teams to investigate, collaborate, and analyze data from any source, on demand, all with unlimited data collection and retention. Ingest everything. Investigate anything.
TOP