| Functionality | Sycope Free | Sycope Express | Sycope Enterprise |
|---|---|---|---|
| Network traffic monitoring | Up to 5 000 logs/s | Up to 10 000 logs/s | Up to 250 000 logs/s |
| Threat and anomaly detection | Yes | Yes | Yes |
| MITRE ATT&CK & CTI | Yes | Yes | Yes |
| Personalized dashboards and reports | Yes | Yes | Yes |
| Number of data sources | No limit | No limit | No limit |
| Number of subnetworks | No limit | No limit | No limit |
| Data retention | Limited to 14 days | No limit | No limit |
| Access management (RBAC) | Limited to admin role | Full user roles | Full user roles |
| Modules | Visibility, Security & Asset discovery | Visibility, Security, Performance & Asset discovery | Visibility & on demand Security, Performance, Asset discovery |
| Integrations with other systems | Yes | Yes | Yes |
| Technical support | Limited | Full support | Full support |
| Functionality | Sycope Free |
|---|---|
| Network traffic monitoring | Up to 5 000 logs/s |
| Threat and anomaly detection | Yes |
| MITRE ATT&CK & CTI | Yes |
| Personalized dashboards and reports | Yes |
| Number of data sources | No limit |
| Number of subnetworks | No limit |
| Data retention | Limited to 14 days |
| Access management (RBAC) | Limited to admin role |
| Modules | Visibility, Security & Asset discovery |
| Integrations with other systems | Yes |
| Technical support | Limited |
| Functionality | Sycope Express |
|---|---|
| Network traffic monitoring | Up to 10 000 logs/s |
| Threat and anomaly detection | Yes |
| MITRE ATT&CK & CTI | Yes |
| Personalized dashboards and reports | Yes |
| Number of data sources | No limit |
| Number of subnetworks | No limit |
| Data retention | No limit |
| Access management (RBAC) | Full user roles |
| Modules | Visibility, Security, Performance & Asset discovery |
| Integrations with other systems | Yes |
| Technical support | Full support |
| Functionality | Sycope Enterprise |
|---|---|
| Network traffic monitoring | Up to 250 000 logs/s |
| Threat and anomaly detection | Yes |
| MITRE ATT&CK & CTI | Yes |
| Personalized dashboards and reports | Yes |
| Number of data sources | No limit |
| Number of subnetworks | No limit |
| Data retention | No limit |
| Access management (RBAC) | Full user roles |
| Modules | Visibility & on demand Security, Performance, Asset discovery |
| Integrations with other systems | Yes |
| Technical support | Full support |
The plans differ mainly in log processing capacity (logs/s), subscription model, available modules, and level of technical support. Each plan is designed for a different organizational scale—from smaller environments to large, complex infrastructures.
Yes. Sycope Free is completely free, does not require a credit card, and can be used without time limits within the 5,000 logs per second cap.
Sycope Free: Visibility, Security & Asset Discovery
Sycope Express: All modules (Visibility, Security, Performance, Asset Discovery)
Sycope Enterprise: Modules available on demand, based on your needs
Pricing is based on the number of logs processed per second (logs/s). For Enterprise deployments, pricing is customized according to the actual scale and requirements of your environment.
Yes. As your infrastructure grows, you can upgrade your plan or adjust parameters. Details are handled individually.
If the limit is exceeded occasionally, nothing will happen. However, if the limits are exceeded on a regular basis, the system will be blocked, with the option to switch to a different Sycope subscription model.
Yes. All Sycope plans are deployed on-premise, with no cloud dependency required.
Sycope Probe is a data collection component.
Sycope Express: Sycope Probe is included
Sycope Enterprise: An unlimited number of Sycope Probes is available
For the Free plan, support is available via a dedicated Discord channel.
With Express and Enterprise subscriptions, you are supported by a dedicated team that works with you from the very beginning of the collaboration.
Yes. You can start with Sycope Free or request a demo to discuss a customized offer - especially for Enterprise deployments.
vCPU: 8
RAM: 8GB
Supported VMs: VMWare + Proxmox
OS disk: 128GB (SSD recommended)
Data drive: according to user preference