XDR pricing axis
optimizer.
The same workload priced four ways: per endpoint, per user, per data volume, or hybrid. Annual cost varies 3-5x depending on which pricing axis the vendor uses. Enter your fleet shape and see which axis is cheapest for you.
Endpoint count (devices)
User count
Monthly data ingest (GB)
Pricing per-unit: $95/endpoint/yr · $8/user/mo · $1.50/GB ingested. Hybrid blends $60/endpoint + $0.80/GB.
cheapest axis for your shape
Per data volume
$14,400 / year
Per endpoint annual
$237,500
Per user annual
$211,200
Per data volume
$14,400
Hybrid (approx)
$157,680
Bands derived from CrowdStrike Falcon, SentinelOne, Microsoft Defender XDR, Splunk, Sumo, Palo Alto Cortex, Trellix published list pricing 2026. Per-unit figures are negotiated down 20-40% at enterprise scale; the ratio between axes stays roughly constant.