Quick Answer
Estimate

ArcSight uses custom pricing as of July 2026. Contact ArcSight directly for a personalized quote. Pricing depends on your chosen tier, contract length, and negotiated discounts.

Use the interactive pricing calculator to estimate your exact cost based on team size and requirements.

  • Free tier: No free tier available

ArcSight offers 1 pricing tiers: Enterprise.

ArcSight uses custom pricing, and hidden costs like implementation and support add to the quoted price as of July 2026. Contact the vendor for a quote. Hidden costs like implementation and support add significantly to the total. Key hidden costs: licensing model complexity, resource-intensive setup, staffing costs. Verified from 1 sources by CostBench.

Hidden Costs Breakdown

1

Licensing Model Complexity

high overage

ArcSight's pricing, based on data ingested and events per second (EPS), can be challenging to predict and lead to unexpected cost increases.

industry

This model can be complex and challenging to predict accurately, especially as data ingestion rates fluctuate, leading to unexpected cost increases.

2

Resource-Intensive Setup

high implementation

The initial setup requires significant infrastructure and experienced personnel, contributing to high upfront implementation costs.

industry

Resource-Intensive Setup: The initial setup of ArcSight requires significant infrastructure, including hardware and software, and a considerable investment in experienced personnel for optimal configuration.

3

Staffing Costs

critical support

Personnel and staffing, including salaries and benefits for security analysts, engineers, and administrators, represent a major hidden cost for SIEMs.

industry

Staffing: Personnel and staffing represent a major hidden cost, often accounting for up to 22% of the total cost of ownership (TCO) for a SIEM.

4

Integration and Custom Connectors

high implementation

Onboarding log sources and developing custom connectors, particularly for ArcSight due to a lack of pre-built integrations, incurs significant costs.

industry

Integration and Custom Connectors: Onboarding 50-150 log sources for a typical enterprise SIEM deployment can cost between $75,000 and $300,000 in the first year.

5

Tuning and Rule Development

medium implementation

An initial tuning sprint is necessary to reduce excessive false positives, and ongoing tuning and content development are continuous expenses.

industry

Tuning and Rule Development: Out-of-the-box detection rules often generate excessive false positives, necessitating an initial tuning sprint that can cost $50,000 to $120,000.

6

Storage and Retention

high overage

Storage and retention costs, which vary by tier, typically account for a significant portion of the total SIEM TCO.

industry

Storage and Retention: Storage and retention costs typically account for 10-15% of the total SIEM TCO.

7

Professional Services

high implementation

ArcSight deployments often require professional services and deployment support due to their complexity and lengthy implementation cycles.

industry

Professional Services: ArcSight deployments often require professional services and deployment support due to their complexity and lengthy implementation cycles.

Frequently Asked Questions

01 What hidden costs should I budget for with ArcSight?

Beyond the license fee, budget for: Licensing Model Complexity ($600,000+ annually); Staffing Costs (22% of the total cost of ownership (TCO); $85,000 to $180,000 per tier annually plus an additional 28-30% for benefits and overhead); Integration and Custom Connectors ($75,000 to $300,000 in the first year; $1,500 to $8,000 per source); Tuning and Rule Development ($50,000 to $120,000); Storage and Retention (10-15% of the total SIEM TCO; $7,000-$45,000 per year; Hot tier: $0.08-$0.50 per GB per month; Warm tier: $0.02-$0.10 per GB per month; Cold archive: $0.002-$0.05 per GB per month). Exact totals depend on your deployment size and negotiated terms.

02 Does ArcSight charge for implementation?

ArcSight implementation is not included in the license cost. The initial setup requires significant infrastructure and experienced personnel, contributing to high upfront implementation costs..

03 How much does ArcSight support cost?

Personnel and staffing, including salaries and benefits for security analysts, engineers, and administrators, represent a major hidden cost for SIEMs.. Estimated impact: 22% of the total cost of ownership (TCO); $85,000 to $180,000 per tier annually plus an additional 28-30% for benefits and overhead.

04 Are there overage or storage costs with ArcSight?

ArcSight's pricing, based on data ingested and events per second (EPS), can be challenging to predict and lead to unexpected cost increases.. Estimated impact: $600,000+ annually.

05 What add-ons cost extra with ArcSight?

Add-on pricing for ArcSight varies by feature. The sourced cost breakdown above lists any verified add-on costs we have.

Check current ArcSight pricing

Prices and terms change; verify against the live pricing page.

See ArcSight Pricing