TCO Calculator

Total Cost of Ownership for Comprehensive Cybersecurity

TCO Calculator

Achieving comprehensive cybersecurity coverage is undeniably costly. Building an in-house security operations center (SOC) will include expenses to acquire tools, staff your SOC, and continuously train your team on the latest threats and technologies. These costs can be a significant obstacle for your organization to achieve short-term security improvements and scale up as your business grows.

Our total cost of ownership (TCO) calculator gives you an overview of the estimated costs for acquiring tools, building an internal team, and training for your team to protect your organization from cybersecurity attacks and deploying a rapid response in case an incident occurs. Since attacks happen at any time of day, the TCO calculator shows the resources required to provide comprehensive coverage to your entire IT environment 24/7.

Need to customize the tool assumptions? You have the flexibility to adjust baseline assumptions, such as salary, analyst capacity and business costs, to better align with your organizational capabilities. Modifications can be done by selecting “Change the Assumptions”.

Calculate the Total Cost of Comprehensive Coverage

How many analysts are dedicated to monitoring your security alerts per day?​

{% analysts %}

How many total employees in your organization?

{% employees %}

How many security devices, servers, laptops, desktops, tablets, Windows, Linux, and MAC devices in your environment will be monitored by the SOC?

{% devices %}

Which of these prevention technologies are you currently utilizing?

Full cost per analyst (salary, bonus, benefits, onboarding) Salary based on SOC distribution of tier 1, 2, and 3 security analysts. Average salaries may vary based on geography.

SOC Manager Salary Average salaries may vary based on geography.

Annual training cost per headcount (certifications, travel, conferences)

Annual analyst turnover Average analyst turnover may vary between 15% - 50%.

Cost to hire an employee

Number of alerts an analyst can handle per day High alert volumes can reduce the quality of analysis and contribute to burnout.

Weekly alerts requiring triage per tool/user A % of lower severity alerts do not require immediate SOC investigation.

The Total Costs of a 24x7 Do-It-Yourself SOC:

{% totalSocCost | zeroOut | roundUp | addCommas %}

Total approximate annual cost of the personnel needed to provide comprehensive coverage​

{% totalLoad | zeroOut | roundUp %}

Total number of analysts required to provide comprehensive coverage

Want more information? Complete the form below to see the complete results of the TCO Calculator and download more great information.​

Learn More: Managed Detection and Response

Security leaders at mid-size or small enterprises often underestimate the cost and heavy lift of building and maintaining a "Do It Yourself" (DIY) security operations center (SOC). Knowing these costs — and understanding the time it takes to build and experience an effective ROI — will help you decide if building your own SOC is the best decision for your business.

The results below are on the information you input into Fortra's Alert Logic Total Cost of Ownership (TCO) Calculator. Take a look at these numbers for developing an in-house SOC as compared to partnering with Fortra's Alert Logic Managed Detection and Response® (MDR), a 24/7 monitoring and threat investigation solution.

Based on {% devices %} nodes supported.

Your SOC costing is based on the following assumptions.

{% employees %} Employees

{% devices %} Nodes

{% totalLoad | zeroOut | roundUp %} Security Analysts

TCO Calculator Estimate* for Your In-house DIY SOC


Based on {% totalLoad | zeroOut | roundUp %} full-time Security Analysts to provide 24/7 comprehensive coverage of your environment + 1 full-time SOC Manager

{% totalCostPeople | addCommas %}


Addressing Cybersecurity compliance program requirements:

  • This may include adoption of/adherence to SOC2 Type 2, HIPAA, PCI-DSS, HITRUST, CIS Benchmark, NIST Framework, CCPA/CPRA, Sarbanes-Oxley (SOX), and ISO-27001

{% totalCostProcess | addCommas %}


May include but not limited to the following:​

  • SOC management tools: ITSM
  • Datacenter/On-Premises Management, Maintenance and Mitigation Platform: SIEM, EDT/EPP, XDR, SOAR
  • Cloud Management, Maintenance and Mitigation Platform: CSPM, CNAPP, CWPP, CIEM, CASB
  • Cyber Threat Intelligence Platform: CTI

{% totalCostTools | addCommas %}


Annual software maintenance/support, floorspace, electricity, employee upskill, internet/WAN, hardware maintenance/support, and cloud services costs.​

{% totalCostOperatingExpenses | addCommas %}

Thinking twice about a DIY in-house SOC?

You've reviewed the numbers … having second thoughts on building your own SOC?

Now that you've seen what it would cost your business to build your own security operations center, it would come as no surprise if you're thinking twice about going down that path. While many organizations think the only way to get the security services they need is by building their own SOC, they quickly realize that there's a better way to get comprehensive security coverage.

Fortra's Alert Logic MDR works across public cloud, hybrid environments, and on-premises to provide vital information on your security posture and detect threats 24/7. With Alert Logic MDR, you decide on the most appropriate level of protection for each of your assets ensuring you achieve your desired security outcome with the right coverage at the best possible cost for your business.

What you can expect with Alert Logic MDR:

  • ▸ A managed security solution that delivers the outcomes your organization demands
  • ▸ An award-winning platform, innovative threat intelligence, and expert defenders working together for you
  • ▸ 24/7 security operations and expert remediation advice
  • ▸ Flexible coverage tailored to your individual business needs
  • ▸ Simple pricing with a lower total cost than assembling and operating an in-house SOC

Ready to get started securing your business with Alert Logic MDR®?

Now that you've downloaded your results, an Alert Logic Cybersecurity Sales Specialist will connect with you to set up a demo of the platform, answer any questions you have, provide more information, and work to get you a customized quote designed specifically for your organization's security needs.

Ready to Protect Your Company with Alert Logic MDR?