Description
Sophos Next-Gen SIEM - 200-499 users and servers - 1 year subscription
Sophos Next-Gen SIEM adds long-term log retention and compliance dashboards to Sophos XDR and Sophos MDR, in the same Sophos Fusion console. It is priced on users and servers, not on how much data you send. This listing covers 200-499 users and servers for 1 year, Sophos part number NSIEMU12AFNCAA.
- Part numberNSIEMU12AFNCAA
- Licensed perUsers and servers combined, 200-499
- Term1 year
- Retention13 months included
- RequiresSophos XDR or MDR
Who it is for
Auditor asks how long you keep logs
Keeps security data for 13 months as standard, with longer options for regulated businesses.
Working toward ISO 27001, PCI DSS or SOC 2
Built-in dashboards show control coverage for frameworks such as ISO 27001, rather than raw log exports.
Data from many tools
Builds on the 500+ Sophos XDR integrations and can take in logs from legacy, regional and in-house systems.
What is included
- 13 months of data retention included, with options to extend to 3, 5, 7 or 10 years.
- 500+ Sophos XDR integrations plus custom ingestion for legacy systems, regional tools and internal applications, using AI parsers instead of custom code.
- No ingestion fees: priced on users and servers rather than data volume.
- Compliance dashboards, including an ISO 27001 dashboard, designed to help with ISO 27001, PCI DSS, HIPAA, GDPR and SOC 2.
- Plain-language questions for analysts, such as whether an attacker has been seen in your environment before.
Count users and servers together. Forty staff plus twelve servers is fifty-two, which puts you in the 50-99 band even though headcount alone says 25-49.
Where it fits
- Sophos XDR or Sophos MDR. Required. Next-Gen SIEM is an add-on to these.
- Sophos Next-Gen SIEM (this listing). Adds long-term retention, custom data sources and compliance dashboards.
This is not a standalone SIEM. If you want to replace a third-party SIEM and do not run Sophos XDR or MDR underneath, tell us and we will say so plainly.
All bands and terms
| Users and servers | 1 year |
|---|---|
| 1-9 users and servers | View |
| 10-24 users and servers | View |
| 25-49 users and servers | View |
| 50-99 users and servers | View |
| 100-199 users and servers | View |
| 200-499 users and servers | This listing |
| 500-999 users and servers | View |
| 1000-1999 users and servers | View |
| 2,000 or more | Ask Nuformat for a quote, priced to your exact count |
Frequently asked questions
How is Sophos Next-Gen SIEM licensed?
By the combined count of users and servers, not by data volume. There are no ingestion-based fees.
Do I need Sophos XDR or MDR as well?
Yes. Next-Gen SIEM is an add-on to Sophos XDR and the Sophos MDR service.
How long is data kept?
Sophos lists 13 months of retention as standard, with options to extend to 3, 5, 7 or 10 years.
Is this the same as TrendAI Agentic SIEM?
No. Agentic SIEM is a TrendAI product. Sophos Next-Gen SIEM is Sophos's own, sometimes shortened to NG-SIEM.
What does this listing cover?
200-499 users and servers for 1 year, Sophos part NSIEMU12AFNCAA.
Can I pay monthly instead of for a full term?
Yes. Nuformat can bill Sophos Next-Gen SIEM monthly as your managed service provider. Monthly rates can change, so a term subscription is the way to fix your price.
Get Sophos Next-Gen SIEM quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Send us your user and server count and the retention period your auditor expects, and we will confirm the band.
Request a quoteFeatures as listed on the Sophos Next-Gen SIEM product page on sophos.com, checked October 11, 2026. Pricing and availability confirmed by Nuformat at quotation. All Sophos Next-Gen SIEM options