Kaspersky SIEM

At a glance

• Editor score
  6.8 / 10
• Pricing
  Pricing on request
• Best for
  Self-hosted teams needing core correlation
• Custom detection rules
  Yes
• Founded
  1997
• Facts checked
  19 Sep 2026

• Where it wins

  • Correlates events in real time and supports custom detection rules.
  • Combines threat hunting, investigation, alerting and case management.
  • Offers UEBA and configurable hot and cold storage retention depth.

• Where it doesn't

  • Pricing is handled through sales rather than published plan prices.
  • No published free-plan details or standard paid-plan retention period.
  • Self-hosted deployment may not suit teams seeking a different deployment model.

Our verdict on Kaspersky SIEM

Kaspersky SIEM is an enterprise security information and event management platform for security operations teams. It collects and manages logs and events, correlates activity for threat detection, and supports threat hunting and investigation. Alerting, case management and user and entity behavior analytics are also included. Its self-hosted deployment and SQL-like query language make it a fit for organizations seeking centralized monitoring and custom correlation without moving the SIEM off their own environment.

The feature set is oriented around an investigation workflow rather than log collection alone: teams can define custom correlation rules, detect alerts in real time, hunt through activity and manage cases. Hot and cold storage with configurable retention depth supports differing access needs for event data. The description also says the product supports multitenancy, integrations with Kaspersky and third-party technologies, and operation without an internet connection. This makes it relevant to organizations that need a SIEM to fit into an existing security technology environment, though specific integration coverage should be established with the vendor.

According to the vendor's pricing information, pricing is handled through contact with Kaspersky or a partner, based on requirements; there are no published plan prices to compare. The reviewed official pages also do not specify ingestion quotas or a standard paid-plan retention period, so buyers should clarify those commercial and capacity terms during evaluation. Kaspersky SIEM is best suited to self-hosted teams prioritizing correlation, detection and investigation. Organizations looking for upfront pricing or a clearly described standard package should compare alternatives before engaging.

Your product? Our editors can test Kaspersky SIEM in depth and publish a review, labelled as paid · from $149/mo →

Kaspersky SIEM pricing

Kaspersky SIEM fact sheet

Alternatives to Kaspersky SIEM

• Elastic SecurityFlexible SIEM coverage with detection, threat hunting, and response workflows.9.4
• CrowdStrike Falcon Next-Gen SIEMA cloud-only SIEM combining cross-domain search, CQL detections, and automated response.9.2
• FortiSIEMA broad IT/OT SIEM with multivendor collection, analytics, case management, and SOAR.9.0

See all Kaspersky SIEM alternatives →

Featured on iTechGuides

Kaspersky SIEM is listed in our SIEM Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/kaspersky-siem/"><img src="https://www.itechguides.com/best/badge/kaspersky-siem.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update