ArcSight vs Splunk Enterprise Security Pricing | Costbench
Compare / OpenText Enterprise Security Manager (ArcSight) vs Splunk Enterprise Security
Shortlist
Team size
25 seats

OpenText Enterprise Security Manager (ArcSight) vs Splunk Enterprise Security

SIEM pricing comparison · 2026

OpenText Enterprise Security Manager (ArcSight) is quote-based, while Splunk Enterprise Security is quote-based.

Visit
See pricing on each vendor's site
Above-the-fold path — each link opens the vendor's pricing page in a new tab.
Compare
2 products · SIEM
Side-by-side · live
OpenText Enterprise Security Manager (ArcSight)
ArcSight pricing is custom-quoted based on deployment size and log ingestion requirements.
View pricing →
Splunk Enterprise Security
Splunk Enterprise Security is a premium SIEM platform used by Fortune 500 companies and go
verified 4d ago
View pricing →
Estimated license cost
at 25 seats
List price × seats. Click a tier below to lock it.
Pricing model unknown
Pricing model unknown
no public list price found
Pricing model unknown
Pricing model unknown
no public list price found
What buyers actually pay
median, annual
Vendr deal-flow data. The real benchmark, not list price.
No Vendr data
—
Not in Vendr's deal flow
Median annual
$406/yr
Vendr · n=6 · limited data
REF · 01

Sources & confidence

Every dollar amount and contract clause below traces back to a sourced fact. We don't manufacture composite scores.

Where this data comes from
Vendr · TrustRadius · Reddit · BBB · official docs
Sources 8 sourced facts
7 hidden-cost · 1 contract
Last verified —
Confidence Limited confidence
Sources 11 sourced facts
7 hidden-cost · 2 contract · Vendr median · 1 review platform
Last verified 4d ago
Confidence High confidence
REF · 02

Plans at a glance

Every tier per product. Lock one to drive the cost row above and reveal a tier-specific outbound CTA.

Tier ladder
Click a tier to lock the cost row to it. Locking surfaces a tier-specific Visit CTA.
REF · 03

Hidden costs

Each cost is severity-ranked, with the dollar range quoted from its source (Vendr, Reddit, TrustRadius, BBB, official docs) — never our estimate.

Beyond the sticker
Severity-ranked, sourced
5 documented
  • Licensing Model Complexity
    $600,000+ annually
    1 source
  • Resource-Intensive Setup
    1 source
  • Staffing Costs
    Up to 22% of the total cost of ownership (TCO) for a SIEM; benefits and overhead add further to salary costs
    1 source
  • Integration and Custom Connectors
    $75,000 to $300,000 in the first year; $1,500 to $8,000 per source
    1 source
  • Tuning and Rule Development
    $50,000 to $120,000
    1 source
5 documented
  • CIM Data Mapping Maintenance
    10-20% of license costs
    1 source
  • Professional Services for Data Onboarding
    $50,000-$200,000
    1 source
  • Storage Cost Escalation
    20-40% of license costs
    1 source
  • Data Preprocessing Tools (Cribl)
    $20,000-$100,000
    2 sources
  • Ongoing Maintenance Overhead
    15-25% of license costs
    2 sources
REF · 04

Contract terms

The fine print, surfaced. Green = buyer-friendly. Each clause backed by a quoted source.

OpenText
Splunk
Auto-renewal
Yes
—
Cancellation
30 to 90 days before the renewal date
—
Commitment
—
1 year typical
Price escalation
5-8%
No published schedule, but Cisco acquisition has raised concerns about future price increases
Can downgrade
—
—
REF · 05

What users say

Aggregated, with sample sizes. We use whichever review platform has data.

User reviews
TrustRadius · Trustpilot · G2
No public ratings yet
Watch out
Complexity and User Interface
TrustRadius
8.7out of 5 (255)
Watch out
Extremely expensive pricing model
Decide
Get a quote from each vendor
Each link opens the vendor's pricing page in a new tab.
License cost is computed from publicly listed plans (real math, list price × seats). Median annual cost is from Vendr's deal flow when available — see source badges. Hidden costs and contract terms each cite their own sources. We do not invent composite scores.
SIEM

OpenText Enterprise Security Manager (ArcSight)

Custom pricing
1 plan
Full pricing breakdown →
VS
SIEM

Splunk Enterprise Security

Custom pricing
2 plans
Full pricing breakdown →

Plan-by-Plan Pricing

Plan OpenText Enterprise Security Manager (ArcSight) Splunk Enterprise Security
Enterprise Custom Custom
Premier Edition — Custom

Hidden Costs

Beyond the sticker price — what catches buyers off guard.

OpenText Enterprise Security Manager (ArcSight) 7 hidden costs

high
Licensing Model Complexity $600,000+ annually (source dated Jul 2026)
high
Resource-Intensive Setup
critical
Staffing Costs Up to 22% of the total cost of ownership (TCO) for a SIEM; benefits and overhead add further to salary costs
high
Integration and Custom Connectors $75,000 to $300,000 in the first year; $1,500 to $8,000 per source (source dated Jul 2026)
medium
Tuning and Rule Development $50,000 to $120,000
See all OpenText Enterprise Security Manager (ArcSight) hidden costs →

Splunk Enterprise Security 5 hidden costs

medium
CIM Data Mapping Maintenance 10-20% of license costs
high
Professional Services for Data Onboarding $50,000-$200,000 (source dated Dec 2025)
critical
Storage Cost Escalation 20-40% of license costs
high
Data Preprocessing Tools (Cribl) $20,000-$100,000 (source dated Oct 2024)
medium
Ongoing Maintenance Overhead 15-25% of license costs
See all Splunk Enterprise Security hidden costs →

Contract Terms

Term OpenText Enterprise Security Manager (ArcSight) Splunk Enterprise Security
Auto-renewal Yes —
Cancellation 30 to 90 days before the renewal date —
Minimum commitment — 1 year typical
Price escalation 5-8% No published schedule, but Cisco acquisition has raised concerns about future price increases

Continue researching