LevelBlue USM Anywhere

LevelBlue USM Anywhere pricing is designed to be predictable and transparent, contrasting with many SIEM vendors that use complex 'EPS' (Events Per Second) metrics. The current model is tiered based on monthly data ingestion volume, typically starting at an Essentials tier around $1,075 per month. Key plans include Essentials, Standard, and Premium, which vary by asset coverage and feature access (such as the number of BlueApps or advanced automation capabilities). Each plan generally includes the USM Anywhere Control Node, sensors for data collection, 90 days of 'hot' searchable storage, and 12 months of 'cold' storage for compliance logs. Overage is managed through a tiered 'Caution', 'Warning', and 'Violation' system to ensure continuous monitoring even when spikes occur, with the option to upgrade as the organization grows.