Coralogix SIEM
Coralogix SIEM: Usage-based cloud SIEM analytics with in-stream detection and archived-log querying. Ranked #16 of 28 in SIEM Software by our editors (7.6/10); pricing: 14-day trial; best for cloud teams wanting usage-based SIEM analytics.
At a glance
- Editor score7.6 / 10
- Pricing14-day trial
- Best forCloud teams wanting usage-based SIEM analytics
- Free planNo
- Paid from$0.42/GB usage-based
- Custom detection rulesYes
- Facts checked19 Sep 2026
Where it wins
- Analyzes security events in-stream and alerts on incoming telemetry
- Supports DataPrime, Lucene, and PromQL for querying
- Integrates with cloud, identity, endpoint, and network sources
Where it doesn't
- No permanent free plan; the free offering is a 14-day trial
- Log pricing is usage-based at $0.42 per GB
- Hot-search retention is customer-configurable
Our verdict on Coralogix SIEM
Coralogix SIEM is a cloud-native security information and event management platform for teams that need to centralize security telemetry, detect threats, investigate events, and support compliance work. It analyzes security events in-stream and can alert in real time, while archived data can be queried remotely from customer-owned storage. The product is aimed at cloud teams and security operations teams that want analytics across security and infrastructure sources rather than a standalone alerting tool.
According to the vendor's published pricing, the Usage-based logs plan costs $0.42 per GB. It includes infinite retention for archived events stored in your bucket. Pricing is based on usage rather than a set of tiered plans, so buyers should account for log volume when evaluating costs. The free offering is a 14-day trial, not a permanent free plan. Hot-search retention is customer-configurable, while archived data can have effectively infinite retention in customer-owned S3.
The feature set combines custom alert rules and conditions, immediate alerts for matching log events, dashboards, and detection content. Remote, index-free querying and support for DataPrime, Lucene, and PromQL give teams several ways to investigate archived telemetry. Prebuilt integrations include AWS CloudTrail, AWS GuardDuty, Microsoft 365, Microsoft Entra ID, CrowdStrike Falcon, Okta, Google Workspace, Kubernetes, OpenTelemetry, and Palo Alto Networks Cortex XSOAR. Choose Coralogix SIEM if usage-based pricing, cloud integrations, and retained-event investigation fit your workflow; teams seeking a permanent free plan or fixed tier pricing should consider alternatives.
Your product? Our editors can test Coralogix SIEM in depth and publish a review, labelled as paid · from $149/mo →
Coralogix SIEM pricing
All 1 Coralogix SIEM plans and prices →
Coralogix SIEM fact sheet
| Free plan | No |
|---|---|
| Paid from | $0.42/GB usage-based |
| Free ingestion limit | Not verified |
| Data retention | Not verified |
| Custom detection rules | Yes |
| Real-time alerting | Yes |
| Deployment | Cloud |
| Query language | DataPrime, Lucene, PromQL |
| Free trial | 14 days |
| Deployment | Cloud |
| Platforms | Web |
| Integrations | 10 integrations: AWS CloudTrail, AWS GuardDuty, Microsoft 365, Microsoft Entra ID, CrowdStrike Falcon, Okta … |
| Pricing | 14-day trial (source) |
| Website | coralogix.com |
| Facts checked | 19 Sep 2026 |
Coralogix SIEM integrations
Coralogix SIEM lists 10 integrations on its own site.
- AWS CloudTrail
- AWS GuardDuty
- Microsoft 365
- Microsoft Entra ID
- CrowdStrike Falcon
- Okta
- Palo Alto Networks Cortex XSOAR
- Google Workspace
- Kubernetes
- OpenTelemetry
Alternatives to Coralogix SIEM
- Elastic SecurityFlexible SIEM coverage with detection, threat hunting, and response workflows.9.4
- CrowdStrike Falcon Next-Gen SIEMA cloud-only SIEM combining cross-domain search, CQL detections, and automated response.9.2
- FortiSIEMA broad IT/OT SIEM with multivendor collection, analytics, case management, and SOAR.9.0
See all Coralogix SIEM alternatives →
Also Ranked In
Coralogix SIEM is ranked in 6 of our directories.
Used Coralogix SIEM? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Coralogix SIEM for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Coralogix SIEM is listed in our SIEM Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/coralogix-siem/"><img src="https://www.itechguides.com/best/badge/coralogix-siem.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update