Datadog Security Hidden Costs 2026: True Cost Breakdown

Quick Answer

Last verified: June 14, 2026

High confidence

Datadog Security costs Free to $41 per month as of August 2026, with 5 plans available including a free tier. Plans: Free (free), Pro at $18/month, Enterprise at $27/month, DevSecOps Pro at $27/month, and DevSecOps Enterprise at $41/month. Pricing depends on your chosen tier, contract length, and negotiated discounts.

Use the interactive pricing calculator to estimate your exact cost based on team size and requirements.

Free tier: Yes

Datadog Security offers 5 pricing tiers: Free, Pro, Enterprise, DevSecOps Pro, DevSecOps Enterprise. A free plan is available. Paid plans include Pro at $18/Per host, per month, Enterprise at $27/Per host, per month, DevSecOps Pro at $27/Per host, per month.

Know Before You Buy — Try Datadog Security Free

Datadog Security lists $0-$41/month, but hidden costs like implementation and support add to the total as of August 2026. Key hidden costs: security tax on log analysis, double charge for log management, custom metrics overages. Verified from 1 sources by CostBench.

Hidden Costs Breakdown

Security Tax on Log Analysis

medium addon

Datadog charges an additional fee, often referred to as a 'Security Tax,' to analyze logs that have already been ingested and indexed.

industry
Subsequently, indexing logs for searchability costs approximately $1.70 per million log events for 15-day retention, and $2.50 per million events for 30-day retention.

Double Charge for Log Management

high overage

Customers pay twice for log management: first to ingest logs at $0.10 per GB, and then again to index them for searchability at approximately $1.70 per million log events for 15-day retention or $2.50 per million events for 30-day retention.

industry
Subsequently, indexing logs for searchability costs approximately $1.70 per million log events for 15-day retention, and $2.50 per million events for 30-day retention.

Custom Metrics Overages

critical overage

Datadog charges a premium for custom metrics not from native integrations, with overages billed at $5.00 per 100 custom metrics per month, potentially reaching hundreds of thousands of dollars monthly due to high-cardinality tags.

industry
Custom Metrics Overages: Datadog charges a premium for "custom metrics," which include any metrics not originating from a native Datadog integration, such as those sent via OpenTelemetry.

Per-Host Billing in Dynamic Environments

high overage

Datadog's per-host billing for Infrastructure Monitoring and APM can lead to unpredictable and inflated bills in dynamic environments with containerized microservices and auto-scaling Kubernetes clusters due to a broad and fluid definition of a 'host.'

industry
In environments with containerized microservices and auto-scaling Kubernetes clusters, the definition of a "host" can be broad and fluid, leading to unpredictable and inflated bills as the host count dynamically increases.

On-Demand Surcharges

high overage

Usage exceeding committed volumes is billed at an on-demand rate approximately 50% higher than the annual committed price.

industry
On-Demand Surcharges: Datadog products carry an on-demand rate that is approximately 50% higher than the annual committed price.

Rehydration Costs

medium addon

When archived logs are pulled back for analysis, a rehydration charge of $0.10 per compressed GB scanned applies, even if only a few lines are retrieved.

industry
Rehydration Costs: When archived logs are pulled back into Datadog for analysis, there's a rehydration charge of $0.10 per compressed GB scanned, meaning users pay for the full scan even if only a few lines are retrieved.

LLM Observability Premium

medium addon

Datadog's LLM Observability for AI-powered applications introduces specialized billing for token ingestion at approximately $0.10 per 1,000 tokens and session billing at around $1.50 per 1,000 sessions.

industry
Log ingestion costs around $0.10 per GB.

Per-Host Billing (High-Water Mark)

high overage

Datadog's core products bill per host using a 'high-water mark' system, charging for the peak number of hosts monitored even if briefly, which can significantly increase costs in dynamic environments.

industry
For example, if an application scales from 50 to 200 hosts for a 5-day launch, the APM bill for the entire month could be based on 200 hosts, costing $6,200 (200 hosts x $31/month) instead of an expected ~$2,260 based on average usage

Log Ingestion

medium addon

Collecting, processing, and archiving logs incurs a charge of $0.10 per GB.

industry
Double Charging for Logs: Log management involves two primary charges: * Ingestion: $0.10 per GB to collect, process, and archive logs

Cloud SIEM Analyzed Events ("Security Tax")

high addon

Datadog Cloud SIEM is billed separately at $5 per million analyzed events per month (annual billing), serving as an additional fee to analyze logs already paid for through ingestion and indexing.

industry
This is often referred to as a "Security Tax" because it's an additional fee to analyze logs you've already paid to ingest and index

Span Ingestion Overages (APM)

medium overage

Exceeding the included 150 GB of ingested spans per host per month costs $0.10/GB, potentially leading to incomplete data if trace sampling is enabled to stay within limits.

industry
Many teams enable trace sampling at 25–50% to stay within their ingestion allotment, potentially leading to incomplete data during incidents

Log Forwarding Costs

medium addon

Forwarding logs to external destinations (excluding S3, GCP Storage, Azure Blob) costs $0.25/GB outbound per destination per month, with costs multiplying for multiple destinations.

industry
Log Forwarding Costs: While forwarding logs to S3, GCP Storage, or Azure Blob is free, forwarding to external destinations (like another SIEM or BI tool) costs $0.25/GB outbound per destination per month, with costs multiplying for multiple destinations

Complex Tiered Pricing

high implementation

Datadog offers over 20 separately priced products, each with its own usage-based charges, which interact in ways that are hard to model upfront.

industry
The total bill is the sum of these dimensions, which interact in ways that are hard to model upfront.

Log Indexing Charges

medium implementation

For searchable logs, the cost is around $1.70 per million log events for 15-day retention or $2.50 per million log events for 30-day retention on an annual plan.

industry
Indexing: For logs that are searchable and can trigger monitors, the cost is around $1.70 per million log events for 15-day retention or $2.50 per million log events for 30-day retention on an annual plan.

Log Archival and Rehydration

high overage

Customers pay to store logs, pay to archive them, and then pay again to look at them later.

industry
Datadog's log archiving and rehydration mean customers pay to store logs, pay to archive them, and then pay again to look at them later.

Cloud SIEM Add-on Charges

medium addon

Datadog Cloud SIEM is an add-on billed at approximately $5 per million analyzed events per month (annual billing), in addition to underlying log ingestion and indexing costs.

industry
It is billed at approximately $5 per million analyzed events per month (annual billing).

Data Egress and Network Costs

low implementation

Some users mention hidden network costs associated with shipping data to Datadog's services from cloud providers.

industry
Data Egress and Network Costs: While not explicitly detailed with figures in the provided search results, some users mention hidden network costs associated with shipping data to Datadog's services from cloud providers.

Switching Costs (Vendor Lock-in)

critical migration

Switching from Datadog can be painful due to dashboards and monitors built over years not exporting cleanly, team knowledge embedded in Datadog's query language, and integrations wired into CI/CD pipelines.

industry
Switching Costs (Vendor Lock-in): Even when costs become unsustainable, switching from Datadog can be painful due to dashboards and monitors built over years not exporting cleanly, team knowledge embedded in Datadog's query language, and integrations wired into CI/CD pipelines.

Frequently Asked Questions

01 What hidden costs should I budget for with Datadog Security?

Beyond the license fee, budget for: Security Tax on Log Analysis ($0.10 to $0.20 per million events); Double Charge for Log Management ($0.10 per GB (ingestion), $1.70 per million log events for 15-day retention, $2.50 per million events for 30-day retention (indexing)); Custom Metrics Overages ($5.00 per 100 custom metrics per month); On-Demand Surcharges (50% higher than the annual committed price); Rehydration Costs ($0.10 per compressed GB scanned); LLM Observability Premium ($0.10 per 1,000 tokens, $1.50 per 1,000 sessions); Per-Host Billing (High-Water Mark) ($6,200 (instead of ~$2,260)); Log Ingestion ($0.10 per GB); Cloud SIEM Analyzed Events ("Security Tax") ($5 per million analyzed events per month); Span Ingestion Overages (APM) ($0.10/GB); Log Forwarding Costs ($0.25/GB outbound per destination per month); Log Indexing Charges ($1.70 per million log events for 15-day retention or $2.50 per million log events for 30-day retention); Cloud SIEM Add-on Charges ($5 per million analyzed events per month). Exact totals depend on your deployment size and negotiated terms.

02 Does Datadog Security charge for implementation?

Datadog Security implementation is not included in the license cost. Datadog offers over 20 separately priced products, each with its own usage-based charges, which interact in ways that are hard to model upfront..

03 How much does Datadog Security support cost?

Premium support pricing for Datadog Security depends on your tier and contract terms. See the sourced cost breakdown above for any verified figures we have.

04 Are there overage or storage costs with Datadog Security?

Customers pay twice for log management: first to ingest logs at $0.10 per GB, and then again to index them for searchability at approximately $1. Estimated impact: $0.10 per GB (ingestion), $1.70 per million log events for 15-day retention, $2.50 per million events for 30-day retention (indexing).

05 What add-ons cost extra with Datadog Security?

Add-on pricing for Datadog Security varies by feature. The sourced cost breakdown above lists any verified add-on costs we have.

Now You Know the Real Cost — Try Datadog Security Free

Check current Datadog Security pricing

Prices and terms change; verify against the live pricing page.

See Datadog Security Pricing