Gravwell Pricing

Consumption-based pricing is outdated and unpredictable

Our infrastructure based pricing means clear total cost of ownership and absolutely no surprises. 
Whether your data needs are straightforward logs or advanced root cause analysis, there’s a Gravwell plan for you.

Community Edition

Perfect for small commercial projects

 

 

Starting At:

Free

Limited to one indexer
Download a license
Community Edition
Capabilities:

Self hosted on-prem or in your private cloud

Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Sysmon and many more)
13.9 GB/day data ingestion
Unlimited ingester endpoints
Unlimited retention
Unlimited search count
Allows 2 seats.
Binary data support
Single Sign on
Tiered storage
Cloud Archive ("Frozen") Storage
Configurable data retention and automatic age-out
Search scheduler agent and built-in orchestration
Scriptable/custom search
Online (“Hot”) replication
Region-aware redundancy
Enhanced Multi-tenancy Permissions
Distributed web frontends
High availability search
Unlimited automations

Community Edition

Download a license

Pro Edition

Great for organizations with single business units that need to collect events, search, and automate
Starting At:

$24k/year

Per indexer
START A CONVERSATION
Pro Edition
Capabilities:

Self hosted on-prem or in your private cloud

Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Sysmon and many more)
Unlimited data ingestion
Unlimited ingester endpoints
Unlimited retention
Unlimited search count
Unlimited user seats
Binary data support
Single Sign-on
Tiered storage
Cloud Archive ("Frozen") Storage

Configurable data retention and automatic age-out

Search scheduler agent and built-in orchestration
Scriptable/custom search
Online (“Hot”) replication    
Region-aware redundancy
Enhanced Multi-tenancy Permissions
Distributed web frontends
High availability search
Unlimited automations

Pro Edition

Download a license

Enterprise Edition

Optimized for Critical Environments and Enterprise SOCs.
Starting At:

$48k/year

Per indexer and for example estimated usage of 1.2 TB / day might require 4 nodes for $192,000
START A CONVERSATION
Enterprise Edition
Capabilities:

Self hosted on-prem or in your private cloud

Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Sysmon and many more)
Unlimited data ingestion
Unlimited ingester endpoints
Unlimited retention
Unlimited search count
Unlimited user seats
Binary data support
Single Sign-on
Tiered storage
Cloud Archive (“Frozen”) Storage

Configurable data retention and automatic age-out

Search scheduler agent and built-in orchestration
Scriptable/custom search
Online (“Hot”) replication    
Region-aware redundancy
Enhanced Multi-tenancy Permissions
Distributed web frontends
High availability search
Unlimited automations

Enterprise Edition

Download a license

Enterprise Cloud Edition

Perfect for those looking to concentrate on data analysis and outsource the hosting and maintenance of a Gravwell Cluster
Starting At:

$48,000+

per year

Minimal passthrough cloud costs

START A CONVERSATION
Enterprise Cloud Edition
Capabilities:

Hosted by Gravwell in the Public Cloud (AWS, GCP, Azure, Oracle)

Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Sysmon and many more)
Unlimited data ingestion
Unlimited ingester endpoints
Unlimited retention
Unlimited search count
Unlimited user seats
Binary data support
Single Sign-on
Tiered storage
Cloud Archive (“Frozen”) Storage

Configurable data retention and automatic age-out

Search scheduler agent and built-in orchestration
Scriptable/custom search
Online (“Hot”) replication    
Region-aware redundancy
Enhanced Multi-tenancy Permissions
Distributed web frontends
High availability search
Unlimited automations

Enterprise Cloud Edition

Download a license

Are you looking for Unlimited Indexers?

This is the license tier of the power users! All with unlimited licensing, you can deploy as many indexers as you want.

We totally get it! If you do the math of the Enterprise Edition and ingest 40, 75, or 100+ TBs a day, then that tier does not compute mathematically. This Black Hole Edition is a scalable, custom-priced version of Gravwell and is meant for users like you.
Gravwell Pricing Are you looking for Unlimited Indexers
Gravwell Pricing Page 23 Update Gravwell Purple Gradient Circle Talk Icon

Let's Talk!

Our platform is built for data-intensive scenarios and can scale to handle TBs of events per day. We offer a variety of features and integrations to help you get the most out of your data. And our team is always available to help you get started. Fill out the form at the right to start a conversation.

Talk to one of our engineers!

Gravwell Pricing Page 23 Update Gravwell FAQ Icon

Frequently Asked Questions

What is a node?

A Gravwell node is an indexer; the Gravwell indexer is responsible for accepting ingested data, indexing it, and storing the data in a storage medium. Webservers, ingesters, and other ancillary components are not counted as nodes for the purpose of licensing.

What is a cluster?

Multiple Gravwell nodes (or Indexers) can be combined to create a single Gravwell Cluster.

What is a webserver?

The webserver acts as the focusing point for all searches and provides an interactive interface into Gravwell.

Do I need multiple webservers?

Most likely, no. Multiple webservers make your cluster more complex. In general, we recommend setting up a single webserver, then adding more only if the load is too high in use.

What is an ingester?

Ingesters gather incoming data, package it into Gravwell entries, and ship it to Gravwell indexers for storage.

What is a dashboard?

Dashboards are aggregated views of searches that provide a view into multiple aspects of the data at once.

What are kits?

Gravwell Kits are pre-packaged tool sets for analyzing a particular data source. Kits exist to analyze Netflow v5, IPFIX, CoreDNS, and more. They're a great way to get started with your data, a jumping-off place to building your own analysis.

What is Community Edition?

Gravwell Community Edition is free for private or commercial usage up to 13.9 GB/day of data ingestion. In addition, our Community actively supports Gravwell on our discord server.

What are the hardware requirements for Gravwell Community Edition?

We strongly recommend at least 4GB of RAM and 2 CPU cores to run Gravwell Community Edition; this should be sufficient up to the CE ingest limit. If you have a paid license, you should scale up your hardware as your daily data ingest increases. In general, we recommend the following rule of thumb:

What are the hardware requirements for Gravwell Pro Edition or Gravwell Enterprise Edition?

You should scale up your hardware as your daily data ingest increases. In general, we recommend the following rule of thumb: One CPU core per 30 GB/day ingest. 1 GB of RAM per 6 GB/day ingest.

Can I import old data?

Yes you can. Check out the migration documents if you have existing data you want to import. https://docs.gravwell.io/#!ingesters/migrate/migrate.md

Are their ingest limits?

Gravwell Community Edition is the ONLY time Gravwell will restrict data ingestion rates. The rate limit is set to 13.9 GB/day of data ingestion, roughly equal to one astronomical unit.

How do I join the Discord Server?

Open invitations are available at: https://discord.com/invite/gravwell

Where do I get support for Gravwell Community Edition?

Join our Discord server and ask any questions you have! https://discord.com/invite/gravwell

How is Gravwell installed?

Gravwell is distributed in four ways: via a Docker container, via a distribution-agnostic self-extracting installer, via a Debian package repository, and via a Redhat package repository.

I have a question that is not listed.

Great! Send us a message, and we will get back to you with an answer. https://www.gravwell.io/contact-us

I want a t-shirt or stickers!

Great! Email marketing@gravwell.io
Gravwell is an enterprise data fusion platform that enables security teams to investigate, collaborate, and analyze data from any source, on demand, all with unlimited data collection and retention. Ingest everything. Investigate anything.
TOP